Abstract
This document is a non-normative set of auxiliary material produced by the User-Managed Access Work Group. It provides advice to, and discussions relevant to, developers and deployers of UMA-enabled software systems, services, and applications.
...
See the UMA Legal page for information on ongoing work to connect the technical UMA entities to contracts and trust frameworks that define "access federations" (in contrast to identity federations).
...
The protection API generally requires "offline" access, that is, when the resource owner is not available. Thus, the authorization server needs to manage the lifetime of the protection API access token (PAT) for this outcome.
...
| Anchor | ||||
|---|---|---|---|---|
|
...