Delegation

2 Articles

Client Instances Are Actors, Not New Clients

Client instances are not new clients. They are actors. With the Actor Profile and the act chain already in place, and an instance_issuers field that fits any client registration channel (static, Dynamic Client Registration, or CIMD), treating instances as first-class actors needs no new grant type, no new client type, and no new claim. It needs a profile that ties them together.

OAuth Standards Delegation Client Instance Workload Identity Agentic Identity JWT CIMD