Third-Party Profiles

This page attempts to keep track of third-party efforts to profile UMA. This page is not guaranteed to include every such profile, nor should any profile's appearance on this page be taken as an endorsement by the UMA Work Group. We strongly recommend that profilers study and follow the advice given in the Specifying Additional Profiles section of the UMA core specification. Note that the UMA core specification itself defines a "bearer" RPT profile that is mandatory to implement, and an OpenID Connect claim profile that is optional.

UMA Profiles

The HEART (Health Relationship Trust) Profile of User-Managed Access 1.0 is approaching Implementer's Draft status at the OpenID Foundation.

RPT Profiles

None known at this time.

Claim Profiles

UMA profile for requesting party trust elevation: This profile defines a basis for adhering to a policy that requires an AAT to have been acquired on the basis of a certain authentication strength, leveraging a proposal for capturing domain-specific authentication mode and level through OpenID Connect.