product1 publisher
Auth0's on-behalf-of exchange keeps the end user's identity in the downstream token
Auth0's documentation gives middle-tier services and MCP servers an RFC 8693 route to call downstream APIs as the user. The token carries the delegation chain, and the exchange has its own rate ceiling.
Publishers:auth0.com
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap−12
- Incentives70
- Confidence58