| 10027 | Best Current Practice for Security of Cross-Device FlowsP. Kasselman, D. Fett, F. Skokan | Best Current Practice | August 2026 |
| 10017 | OAuth 2.0 for Browser-Based ApplicationsA. Parecki, P. De Ryck, D. Waite | Best Current Practice | August 2026 |
| 10006 | Automatic SIP Trunking and PeeringK. Inamdar, S. Narayanan, C. Jennings | Proposed Standard | August 2026 |
| 9944 | Device Schema Extensions to the System for Cross-Domain Identity Management (SCIM) ModelM. Shahzad, H. Iqbal, E. Lear | Proposed Standard | May 2026 |
| 9770 | Notification of Revoked Access Tokens in the Authentication and Authorization for Constrained Environments (ACE) FrameworkM. Tiloca, F. Palombini, S. Echeverria, G. Lewis | Proposed Standard | June 2025 |
| 9728 | OAuth 2.0 Protected Resource MetadataM.B. Jones, P. Hunt, A. Parecki | Proposed Standard | April 2025 |
| 9700 | Best Current Practice for OAuth 2.0 SecurityT. Lodderstedt, J. Bradley, A. Labunets, D. Fett | Best Current Practice | January 2025 |
| 9635 | Grant Negotiation and Authorization Protocol (GNAP)J. Richer, Ed., F. Imbault | Proposed Standard | October 2024 |
| 9594 | Key Provisioning for Group Communication Using Authentication and Authorization for Constrained Environments (ACE)F. Palombini, M. Tiloca | Proposed Standard | September 2024 |
| 9560 | Federated Authentication for the Registration Data Access Protocol (RDAP) Using OpenID ConnectS. Hollenbeck | Proposed Standard | April 2024 |
| 9526 | Simple Provisioning of Public Names for Residential NetworksD. Migault, R. Weber, M. Richardson, R. Hunter | Experimental | January 2024 |
| 9470 | OAuth 2.0 Step Up Authentication Challenge ProtocolV. Bertocci, B. Campbell | Proposed Standard | September 2023 |
| 9449 | OAuth 2.0 Demonstrating Proof of Possession (DPoP)D. Fett, B. Campbell, J. Bradley, T. Lodderstedt, M. Jones, D. Waite | Proposed Standard | September 2023 |
| 9431 | Message Queuing Telemetry Transport (MQTT) and Transport Layer Security (TLS) Profile of Authentication and Authorization for Constrained Environments (ACE) FrameworkC. Sengul, A. Kirby | Proposed Standard | July 2023 |
| 9409 | The 'sip-trunking-capability' Link Relation TypeK. Inamdar, S. Narayanan, D. Engi, G. Salgueiro | Informational | July 2023 |
| 9396 | OAuth 2.0 Rich Authorization RequestsT. Lodderstedt, J. Richer, B. Campbell | Proposed Standard | May 2023 |
| 9207 | OAuth 2.0 Authorization Server Issuer IdentificationK. Meyer zu Selhausen, D. Fett | Proposed Standard | March 2022 |
| 9203 | The Object Security for Constrained RESTful Environments (OSCORE) Profile of the Authentication and Authorization for Constrained Environments (ACE) FrameworkF. Palombini, L. Seitz, G. Selander, M. Gunnarsson | Proposed Standard | August 2022 |
| 9202 | Datagram Transport Layer Security (DTLS) Profile for Authentication and Authorization for Constrained Environments (ACE)S. Gerdes, O. Bergmann, C. Bormann, G. Selander, L. Seitz | Proposed Standard | August 2022 |
| 9201 | Additional OAuth Parameters for Authentication and Authorization for Constrained Environments (ACE)L. Seitz | Proposed Standard | August 2022 |
| 9200 | Authentication and Authorization for Constrained Environments Using the OAuth 2.0 Framework (ACE-OAuth)L. Seitz, G. Selander, E. Wahlstroem, S. Erdtman, H. Tschofenig | Proposed Standard | August 2022 |
| 9126 | OAuth 2.0 Pushed Authorization RequestsT. Lodderstedt, B. Campbell, N. Sakimura, D. Tonge, F. Skokan | Proposed Standard | September 2021 |
| 9101 | The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)N. Sakimura, J. Bradley, M. Jones | Proposed Standard | August 2021 |
| 9068 | JSON Web Token (JWT) Profile for OAuth 2.0 Access TokensV. Bertocci | Proposed Standard | October 2021 |
| 8996 | Deprecating TLS 1.0 and TLS 1.1K. Moriarty, S. Farrell | Best Current Practice | March 2021 |
| 8936 | Poll-Based Security Event Token (SET) Delivery Using HTTPA. Backman, Ed., M. Jones, Ed., M. Scurtescu, M. Ansari, A. Nadalin | Proposed Standard | November 2020 |
| 8898 | Third-Party Token-Based Authentication and Authorization for Session Initiation Protocol (SIP)R. Shekh-Yusef, C. Holmberg, V. Pascual | Proposed Standard | September 2020 |
| 8826 | Security Considerations for WebRTCE. Rescorla | Proposed Standard | January 2021 |
| 8725 | JSON Web Token Best Current PracticesY. Sheffer, D. Hardt, M. Jones | Best Current Practice | February 2020 |
| 8707 | Resource Indicators for OAuth 2.0B. Campbell, J. Bradley, H. Tschofenig | Proposed Standard | February 2020 |
| 8705 | OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access TokensB. Campbell, J. Bradley, N. Sakimura, T. Lodderstedt | Proposed Standard | February 2020 |
| 8693 | OAuth 2.0 Token ExchangeM. Jones, A. Nadalin, B. Campbell, Ed., J. Bradley, C. Mortimore | Proposed Standard | January 2020 |
| 8628 | OAuth 2.0 Device Authorization GrantW. Denniss, J. Bradley, M. Jones, H. Tschofenig | Proposed Standard | August 2019 |
| 8620 | The JSON Meta Application Protocol (JMAP)N. Jenkins, C. Newman | Proposed Standard | July 2019 |
| 8576 | Internet of Things (IoT) Security: State of the Art and ChallengesO. Garcia-Morchon, S. Kumar, M. Sethi | Informational | April 2019 |
| 8485 | Vectors of TrustJ. Richer, Ed., L. Johansson | Proposed Standard | October 2018 |
| 8473 | Token Binding over HTTPA. Popov, M. Nystroem, D. Balfanz, Ed., N. Harper, J. Hodges | Proposed Standard | October 2018 |
| 8471 | The Token Binding Protocol Version 1.0A. Popov, Ed., M. Nystroem, D. Balfanz, J. Hodges | Proposed Standard | October 2018 |
| 8417 | Security Event Token (SET)P. Hunt, Ed., M. Jones, W. Denniss, M. Ansari | Proposed Standard | July 2018 |
| 8414 | OAuth 2.0 Authorization Server MetadataM. Jones, N. Sakimura, J. Bradley | Proposed Standard | June 2018 |
| 8322 | Resource-Oriented Lightweight Information Exchange (ROLIE)J. Field, S. Banghart, D. Waltermire | Proposed Standard | February 2018 |
| 8252 | OAuth 2.0 for Native AppsW. Denniss, J. Bradley | Best Current Practice | October 2017 |
| 8176 | Authentication Method Reference ValuesM. Jones, P. Hunt, A. Nadalin | Proposed Standard | June 2017 |
| 7853 | A URN Namespace for GlobusS. Martin, S. Tuecke, B. McCollam, M. Lidman | Informational | May 2016 |
| 7846 | Peer-to-Peer Streaming Tracker Protocol (PPSTP)R. Cruz, M. Nunes, J. Xia, R. Huang, Ed., J. Taveira, D. Lingli | Proposed Standard | May 2016 |
| 7831 | Application Bridging for Federated Access Beyond Web (ABFAB) ArchitectureJ. Howlett, S. Hartman, H. Tschofenig, J. Schaad | Informational | May 2016 |
| 7712 | Domain Name Associations (DNA) in the Extensible Messaging and Presence Protocol (XMPP)P. Saint-Andre, M. Miller, P. Hancke | Proposed Standard | November 2015 |
| 7662 | OAuth 2.0 Token IntrospectionJ. Richer, Ed. | Proposed Standard | October 2015 |
| 7644 | System for Cross-domain Identity Management: ProtocolP. Hunt, Ed., K. Grizzle, M. Ansari, E. Wahlstroem, C. Mortimore | Proposed Standard | September 2015 |
| 7643 | System for Cross-domain Identity Management: Core SchemaP. Hunt, Ed., K. Grizzle, E. Wahlstroem, C. Mortimore | Proposed Standard | September 2015 |
| 7636 | Proof Key for Code Exchange by OAuth Public ClientsN. Sakimura, Ed., J. Bradley, N. Agarwal | Proposed Standard | September 2015 |
| 7635 | Session Traversal Utilities for NAT (STUN) Extension for Third-Party AuthorizationT. Reddy, P. Patil, R. Ravindranath, J. Uberti | Proposed Standard | August 2015 |
| 7628 | A Set of Simple Authentication and Security Layer (SASL) Mechanisms for OAuthW. Mills, T. Showalter, H. Tschofenig | Proposed Standard | August 2015 |
| 7592 | OAuth 2.0 Dynamic Client Registration Management ProtocolJ. Richer, Ed., M. Jones, J. Bradley, M. Machulak | Experimental | July 2015 |
| 7591 | OAuth 2.0 Dynamic Client Registration ProtocolJ. Richer, Ed., M. Jones, J. Bradley, M. Machulak, P. Hunt | Proposed Standard | July 2015 |
| 7523 | JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization GrantsM. Jones, B. Campbell, C. Mortimore | Proposed Standard | May 2015 |
| 7522 | Security Assertion Markup Language (SAML) 2.0 Profile for OAuth 2.0 Client Authentication and Authorization GrantsB. Campbell, C. Mortimore, M. Jones | Proposed Standard | May 2015 |
| 7521 | Assertion Framework for OAuth 2.0 Client Authentication and Authorization GrantsB. Campbell, C. Mortimore, M. Jones, Y. Goland | Proposed Standard | May 2015 |
| 7481 | Security Services for the Registration Data Access Protocol (RDAP)S. Hollenbeck, N. Kong | Internet Standard | March 2015 |
| 7452 | Architectural Considerations in Smart Object NetworkingH. Tschofenig, J. Arkko, D. Thaler, D. McPherson | Informational | March 2015 |
| 7397 | Report from the Smart Object Security WorkshopJ. Gilger, H. Tschofenig | Informational | December 2014 |
| 7165 | Use Cases and Requirements for JSON Object Signing and Encryption (JOSE)R. Barnes | Informational | April 2014 |
| 7069 | DECoupled Application Data Enroute (DECADE)R. Alimi, A. Rahman, D. Kutscher, Y. Yang, H. Song, K. Pentikousis | Informational | November 2013 |
| 7009 | OAuth 2.0 Token RevocationT. Lodderstedt, Ed., S. Dronia, M. Scurtescu | Proposed Standard | August 2013 |
| 6819 | OAuth 2.0 Threat Model and Security ConsiderationsT. Lodderstedt, Ed., M. McGloin, P. Hunt | Informational | January 2013 |
| 6750 | The OAuth 2.0 Authorization Framework: Bearer Token UsageM. Jones, D. Hardt | Proposed Standard | October 2012 |