WSO2 Changelog

Asgardeo now supports the Token Exchange grant type for applications within organizations, enabling secure token exchange across  trusted token issuers defined at the organization level.

Key capabilities include:

• Trusted token issuer support: Configure and use trusted token issuers at the organization level to enable secure token exchange between systems.
• Enable implicit user account association: Automatically link an incoming external token to an existing local user account for both root and child organizations.
• Define lookup attributes: Specify up to two attributes to identify the corresponding local user during token exchange. These attributes must be configured as unique across user stores to ensure accurate user mapping.

Documentation: 

• https://wso2.com/asgardeo/docs/guides/organization-management/generate-tokens-for-organization-apps/#token-exchange-grant