DPoP (Demonstrating Proof of Possession) support in IDSP

Products

• Symantec Identity Security Platform - IDSP (formerly VIP Authentication Hub)

Issue/Introduction

Does IDSP (formerly VIP Authentication Hub) support DPoP?

DPoP (Demonstrating Proof of Possession) is an OAuth 2.0 extension (RFC 9449) that secures access tokens by binding them to a specific client using cryptographic keys. It prevents attackers from using stolen "bearer tokens" by requiring the client to prove ownership of a private key for every request, enhancing API security without complex infrastructure.

Environment

IDSP: ALL

Resolution

This new feature will be supported in release 4.1, but not any version prior.