M7.org · News · Tag
identity
22 articles
-
The M7 provider profile is public
M7-OIDC-1.0-RC1 is on the docs site. Live discovery advertises RFC 8705 mTLS. Release candidate, not certification, not GA.
-
Stock OIDC and the M7 path
Same authorization server, two profiles: stock OpenID Connect by default, and opt-in bindings, ACK, and DPoP when the threat is loss or replay.
-
People, machines, and tenants
M7 does not flatten the world into one user table. People, machines, and tenants are different principals — that is the product, not a footnote.