The IETF OAuth Working Group has adopted the Identity Assertion Authorization Grant specification!
This specification provides a mechanism for an application to use an identity assertion to obtain an access token for a third-party API by coordinating through a common enterprise identity provider
This is the basis of Cross App Access (XAA), providing IT admins better visibility and control of app-to-app connections by configuring the connections in their enterprise IdP.
While it will still be a while before it is an RFC, this is an important step in the standards process, as this is the first time the document is "official"! This signifies that the working group agrees that the problem is worth solving, and agrees on the general direction of the spec.
Thanks to everyone for your contributions and feedback so far!
And thanks to my co-authors Karl McGuinness and Brian Campbell!
Exactly two weeks ago, I wrote here on the blog that I was feeling strangely optimistic. š
Then last week happened to meā¦nothing majorly frustrating, merely ādeath by a thousand papercuts.ā I tried to get extra rest on Labor Day (September 1 in the U.S.) and slow-danced into this week hopeful I could turn things around.
And itās been a slog out of depression every damn day. š„ŗ
Again, no one major catastrophe. Just feeling like Iām grinding my gears at every turnā¦both at work and otherwise. I hate weeks like that!
But I went on an extra-cozy scooter ride this evening, enjoying the Portland waterfront and watching people going in and out of bars and strip clubs and donut shops and art galleries and a myriad of quirky interesting places, and that cheered me up tremendously. Being outdoors and seeing humans having a good time IRL almost never fails to set my mood aright.
Better yet, Iāll be attending a dear friendās wedding this weekend, which Iām sure will be a highlight of summerās endgame for me. Hopefully this weekend marks the turning point when I can fully get back on solid mental ground again. āŗļø
I was hanging out on a co-working Zoom with some friends today and there was some joking about whether a younger person had seen something before. It was very lighthearted and in good fun (no one was offended), but it reminded me of my desire to approach things like that with curiosity and foster an environment of delight. I think itās becoming an important personal value for me as I get older.
It also reminded me of something Ego Nwodim said on the So True podcast:
āI aspire to be an older person whose mind can be changed ... that seems super rudimentary, but how often do we go like, āoh, that person's older.ā? I would feel like part of a life well lived for me would mean that at 70, someone could change my mind by presenting information I had not previously considered.ā
I made a small update on my homepage. The photos section (screenshot below) previously was not showing some of the meta information like the syndication links. I added those along with the rest of the h-entry markup so that Bridgy will find the syndication links and send back responses from Bluesky.

A very minor visual update: the āAlso on,ā author card, published date, and permalink appear now.
I gave Bridgy a nudge to scrape my homepage again and it quickly started sending the responses back to the original post. This IndieWeb stuff really seems like magic, sometimes!
Itās been a while! Excited to return to IndieWebCamp, in Berlin, no less!