1.   Roll Call

• Present: Nat, George, Brian
• Regret:

2.   Adoption of the agenda

• Since draft agenda was not sent out, the following topics were dealt with.

3.   Reciprocal OAuth (George)

Reciprocal OAuth is going to the last call soon. We should do careful read and give feedback.

4.   Native SSO and related use-cases (George)

The situation around the browser etc. has changed a lot since we did AppAuth pattern, e.g., samesite=lax and ITP2. It seems to be a good time to re-collect the use-cases and evaluate what breaks. George has started a slide deck to be used at the OpenID Workshop before IIW. It is still just an outline but he will share it with people who wants to fill in.

Some of the use cases that were discussed in the calls include:

• Hybrid-App (Native App + Server side): Whether to start the flow from the Native App or Server Side.
• Minimum privilege Access Token v.s. Wider-scope but sender constrained AT through Dynamic Client Registration.
• Form Post and samesite=lax
• App to App token passing within the same developer.
• App to App token passing among the apps from different developers.

5.   AOB

The call closed at 15:38 UTC