# Identity Continuation Assertion for OAuth 2.0 Token Exchange

[3 · Permit](/category/permit/)

| Identity Continuation Assertion for OAuth 2.0 Token Exchange |
| --- |
| Category | [Permit](/category/permit/) |
| Governed by | IETF OAuth Working Group (Web Authorization Protocol). Standards Track working-group draft. |
| Status | Active Internet-Draft, OAuth WG document, Intended status: Standards Track; draft-mcguinness-oauth-id-continuation-assertion-02 dated 2026-09-09, expires 2027-03-13 |
| Phase | working group |
| Implementation | none found |
| Adoption | unmeasured |
| Version | draft-mcguinness-oauth-id-continuation-assertion-02 (2026-09-09) |
| Specification | [https://www.ietf.org/archive/id/draft-mcguinness-oauth-id-continuation-assertion-02.txt](https://www.ietf.org/archive/id/draft-mcguinness-oauth-id-continuation-assertion-02.txt) |
| Found at | OAuth 2.0 token exchange (RFC 8693). The assertion is a subject token, not a file on the origin. |
| Last checked | 2026-10-20 |
| Freshness | current · checked 2026-10-20 |
| Solves | Delegate a user's authority to an agent, Prove an agent's identity |

Identity Continuation Assertion for OAuth 2.0 Token Exchange is an agentic-web standard (document format) at step 3, Permit, governed by IETF OAuth Working Group (Web Authorization Protocol). Standards Track working-group draft; its own status is "Active Internet-Draft, OAuth WG document, Intended status: Standards Track; draft-mcguinness-oauth-id-continuation-assertion-02 dated 2026-09-09, expires 2027-03-13" (working group). It answers: How can a workload obtain an ID-JAG for another service after the user who started the session is no longer present? Adoption is unmeasured, last verified 2026-10-20.

[Permit](/category/permit/) draft-mcguinness-oauth-id-continuation-assertion-02 is a Standards Track Internet-Draft of the IETF Web Authorization Protocol (OAuth) working group, dated 9 September 2026 and expiring 13 March 2027 [[1]](#ref-1). It defines a short-lived, sender-constrained JWT used as a token-exchange subject token, so a workload can obtain an Identity Assertion JWT Authorization Grant (ID-JAG) for another service after the user has left [[1]](#ref-1).

## Overview
It extends the ID-JAG profile already tracked as identity-assertion-authz-grant. It is a separate record from the Workload Authorization Grant, the Agent-Delegation header, and both AAP documents. The datatracker entry for the draft is [[2]](#ref-2).

## Discovery and probe

OAuth 2.0 token exchange (RFC 8693). The assertion is a subject token, not a file on the origin.

```
n/a n/a (token-exchange subject token; no fixed origin artifact)
parse:     n/a. The assertion is presented as a subject token in a token-exchange request.
on absent: No public artifact is defined, so absence at an origin is expected.
```

Not probed live: needs-credentials. The identity-continuation assertion is a token-exchange subject token; it is not published at a fixed path.

## History
- 2026-10-20 — added from staged research 2026-10-20; header read from draft-mcguinness-oauth-id-continuation-assertion-02

## Instances

No instances recorded yet.

## See also

## References

- draft-mcguinness-oauth-id-continuation-assertion-02 is a Standards Track Internet-Draft of the Web Authorization Protocol (OAuth) working group, dated 9 September 2026 and expiring 13 March 2027. It defines a short-lived sender-constrained JWT used as a token-exchange subject token so a workload can obtain an ID-JAG after the user has left. — [https://www.ietf.org/archive/id/draft-mcguinness-oauth-id-continuation-assertion-02.txt](https://www.ietf.org/archive/id/draft-mcguinness-oauth-id-continuation-assertion-02.txt) (2026-09-09) VERIFIED
- Datatracker document page for draft-mcguinness-oauth-id-continuation-assertion. — [https://datatracker.ietf.org/doc/draft-mcguinness-oauth-id-continuation-assertion/](https://datatracker.ietf.org/doc/draft-mcguinness-oauth-id-continuation-assertion/) (2026-09-09) VERIFIED

[JSON](/data/protocols/oauth-id-continuation.json) · [Markdown](/protocols/oauth-id-continuation/index.md)