...
This page collects specifications and auxiliary documents produced by the Work Group.
We use https://github.com/KantaraInitiative/wg-uma for active spec development, with snapshots provided on the docs.kantarainitiative.org site.
The User-Managed Access (UMA) 2.0 Grant for OAuth 2.0 Authorization and Federated Authorization for User-Managed Access (UMA) 2.0 are currently at Draft Recommendation stage.
UMA Core V1.0.1 Recommendation and the OAuth Resource Set Registration V1.0.1 Recommendation are now available (check out the Release Notes too) are the previous Recommendation versions. A related specification is UMA Claims-Gathering Extension for Enhanced Security.
Obsolete specifications and auxiliary documents are collected under a separate page in this area.In case you're wondering what happened to the IETF Internet-Drafts corresponding to the Kantara technical specifications, they do still exist, but the latest versions (UMA Core, OAuth RSR) point to the Kantara versions as canonical
We use https://github.com/KantaraInitiative/wg-uma for active spec development, with snapshots provided on the docs.kantarainitiative.org site.