Cross Domain · security identity
private_key_jwt Client Authentication
private_key_jwt is an OAuth 2.0 and OpenID Connect client authentication method in which the client proves its identity to the token endpoint by signing a JWT assertion with its private key, rather than sending a shared client secret. Based on RFC 7523 and RFC 7521, it removes shared secrets from the wire and is required by the FAPI security profiles used across open banking and open finance.
Also known as private_key_jwt, JWT Client Authentication, RFC 7523, Private Key JWT.
Providers that carry private_key_jwt 0
No provider in the catalog carries this standard as a tag yet. That is a statement about the catalog's tagging, not about adoption: a provider that implements private_key_jwt and says so in its APIs.json profile appears here on the next build. Add or correct a listing.
Read from the API Evangelist standards directory. Provider links come from the catalog's own identity tags and are rebuilt nightly. If this page is wrong about a standard or a provider, say so.