---
# System prepended metadata

title: 'SIG Meeting: 2025-03-19 21st Meeting (65th from Ex FAPI-SIG)'

---

# SIG Meeting: 2025-03-19 21st Meeting (65th from Ex FAPI-SIG)
[Meeting Slides](https://github.com/keycloak/kc-sig-fapi/blob/main/OAuth-SIG/meetings/21st/presentations/OAuth-SIG_21st_MTG_agenda.pdf)

- Date: Wed 19 March 2025
- Time:
  12:00 - 13:00 UTC in 1 hour
   8:00 -  9:00 EDT  (UTC-4)
  12:00 - 13:00 GMT  (UTC+0)
  13:00 - 14:00 CET  (UTC+1)
  13:00 - 14:00 WAT  (UTC+1)
  14:00 - 15:00 EET  (UTC+2)
  17:30 - 18:30 IST  (UTC+5:30)
  21:00 - 22:00 JST  (UTC+9)
  22:00 - 23:00 AEST (UTC+10)

## Agenda
Agenda Items to discuss

## Attendees
- Takashi Norimatsu
- Francis Pouatcha
- Vinod Anandan
- Gilbert Fernandes
- Alexander Schwartz
- Assah Bismark
- Dmitry Telegin
- Kannan Rasappan
- Pascal Knüppel
- Marek Posolda
- Nathalia Pinesi
- Bertrand Ogen
- Rodrick Awambeng
- Victoire Motouom
- Thomas Darimont

## Notes
Notes by Topic

### General
- Takashi presents current state of efforts
- Next OAuth SIG meeting will be held on Wednesday ??? April 2025.

### KeyConf 25 Amsterdam
BarCamp will be planned on 29 August, the next day of KeyConf 25 Amsterdam.

Who can attend the BarCamp? The same as Keycloak DevDay 2025 post event, inviting only speakers of KeyConf 25?

BackBase HQ office basically is OK to be used for BarCamp, but do not have several rooms.

### Transaction Token, SPIFEE for Workload Identity
IBM staff will have a presentation about this topin in KubeCon Europe 2025.

### OpenID Verifiable Credentials Issuance (OID4VCI)
All issues in the epic issue were resolved.
The remaining one PR was also merged.
https://github.com/keycloak/keycloak/pull/37687

### Token Exchange
Standard Internal - Internal case support was completed.
Marek will have a demonstration about it in the next breakout session (26 March).

### Demonstrating Proof-of-Possession (DPoP)
Following bug-fix PRs were merged.
[Resolved] DPoP: Refresh token created with DPoP can be refreshed without proof (#36475)
[Resolved] DPoP: User Info Endpoint authorization type mismatch (#36476)

### FAPI 2.0
The final version of FAPI 2.0 Security Profile was published in Feb 2025.

## Recordings
https://us06web.zoom.us/rec/share/Cc9DewD2jj3wmFYNXgdSYlTZwGz_LCs-rADKmlmWn5zbW90ag7oWZUKY6zLgT4Z5.kKhIWxlpTiY5H5bg
