Identity Assertion JWT Authorization Grant Draft 06

We've just published draft -06 of the Identity Assertion JWT Authorization Grant (ID-JAG): https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-assertion-authz-grant/ It's been great to see so many new implementations of ID-JAG over the past few months, across identity providers, authorization servers, clients and libraries. -05 and -06 are mostly about bringing what we've learned from these implementations back into the spec. The diff looks big, but most of it tightens the wording so independent implementations interoperate better. The flow and the overall design haven't changed. Most of the changes are clarifications, such as: How resource and audience values are compared and validated Which sub value the IdP selects for the Resource Authorization Server, and how subject identifiers are mapped Whose claims the ID-JAG carries (End-User, client, etc) How the Resource Authorization Server finds and validates the ID-JAG signing keys SAML NameID handling Using a Refresh Token as…