The Shared API Team's evolving views on API Authentication and Authorization issues can be found on this page.
The Framework should require certain characteristics, such as
APIs may implement protocols suitable for their specific bindings so long as they are compliant with the Framework requirements.
Additionally, the Framework may define certain mechanisms as explicitly compliant, such as