ID-JAG token exchange across trust domains

Identity and Access Management now supports Identity Assertion JWT Authorization Grant (ID-JAG) token exchange. An ID-JAG is a short-lived, signed JSON Web Token (JWT) that enables identity handoff across trust domains. A source identity domain exchanges an ID token for an ID-JAG. The target independently decides whether to exchange the grant for an OAuth access token.

For an overview and instructions for both exchange flows, see Token Exchange Grant Type: Identity Assertion JWT Authorization Grant.