This specification provides guidance for enabling interaction and establishing trust among AARC-compliant proxies that implement OAuth 2.0 Authorization Servers (AS) and Resource Servers (RS) residing in distinct domains. These interactions are facilitated through trusted third parties referred to as Trust Authorities, which are entities issuing authoritative statements about entities that participate in an identity federation. The federation uses OpenID Federation. This document is intended for operators and implementers of AAI services and defines two trust profiles: G100.1 (Basic Trust Model), specifying the minimum requirements for establishing trust between proxies using OpenID Federation trust chains, and G100.2 (Fine-Grained Trust Model), which extends the basic model with policy-based trust through the use of Trust Marks and metadata policies.

Document URL: https://docs.google.com/document/d/1i-SblN6e5Uaw7iJQUBRXZzyf-RTae38nq7mR-6nyFlE/edit
Status: Final Call (presented to AEGIS on 10 November 2025)
DOI: Pending
Errata: none
Supersedes: none