Federated/delegated authorization

[bc-pi]

OAuth and its IETF WG are mentioned a number of times but the "Scope of Work" talks only about federated authentication. It's a bit of a semantic rathole and I'd be lying if I claimed to have more than a clue about the right terminology but what OAuth does seems different enough that it likely warrants some kind of distinct mention in the scope. Maybe something like delegated authorization or federated authorization?