One on many variations for OpenID Connect being discussed in the IETF working group. This one might have application to the use case of managing job submissions from portals or other signed-on, actively managed environments (although it is proposed in other terms): Link: https://wdenniss.com/fastidv Alan