keycloak-scim/server_admin/topics/threat/audience-limit.adoc
2018-09-25 08:10:21 +02:00

6 lines
No EOL
347 B
Text

=== Limit Token Audience
In environments where the level of trust among services is low, it is a good practice to limit the audiences on the token. The
motivation behind this is described in the https://tools.ietf.org/html/rfc6819#section-5.1.5.5[OAuth2 Threat Model] document and
more details are in the <<_audience, Audience Support section>>.