Intelligence Directory

Aaron Parecki

Identity-standards director at Okta, maintainer of oauth.net and participant in the IETF OAuth Working Group. The IETF Datatracker captured on 31 August 2026 lists him as chair of the SCIM working group and records RFC 10017 among two RFCs.

Public role: Identity-standards director at Okta, maintainer of oauth.net and participant in the IETF OAuth Working Group. The IETF Datatracker captured on 31 August 2026 lists him as chair of the SCIM working group and records RFC 10017 among two RFCs.

What to know first

Public roleIdentity-standards director at Okta, maintainer of oauth.net and participant in the IETF OAuth Working Group. The IETF Datatracker captured on 31 August 2026 lists him as chair of the SCIM working group and records RFC 10017 among two RFCs.Medium confidence
Source basisPublic directory evidenceMedium confidence
Last verifiedAug 31, 2026High confidence

Basic information

NameAaron PareckiHigh confidence
Public roleIdentity-standards director at Okta, maintainer of oauth.net and participant in the IETF OAuth Working Group. The IETF Datatracker captured on 31 August 2026 lists him as chair of the SCIM working group and records RFC 10017 among two RFCs.Medium confidence
Last verifiedAug 31, 2026High confidence

Related entities, projects, and resources

Editorial contextAaron Parecki and the BFF That Stops Token Theft but Not Client Hijacking, Putting OAuth tokens behind a server is a material security improvement. It is not the end of the authorization story. RFC 10017 shows why: malicious browser code may be unable to steal a token and still be able to spend the user’s live session through the same Backend for Frontend as the legitimate application.Medium confidence