RFC 8693: Token Exchange

datatracker.ietf.org/doc/html/rfc8693

The Token Exchange extension defines a mechanism for a client to obtain its own tokens given a separate set of tokens. This has several different applications including:

• Single-sign-on between multiple mobile apps without launching a web browser
• A resource server exchanging a client's tokens for its own tokens

Related Specs:

• OAuth 2.0 Bearer Token Usage (RFC 6750)
• JWT Profile for Access Tokens

More resources

• Native SSO: Desktop and Mobile Apps Single-Sign-On (developer.okta.com)
• How to Create a Seamless Mobile SSO (Single Sign-On) Experience in iOS (developer.okta.com)