These are exciting times in mobile identity! The mobile web browser may finally be able take its place as a failsafe login option, rather than being the only login option for native mobile applications. This means improved user experiences and more application-level control over the login UX, all while retaining backend control of authentication and authorization processes. While this draft provides simplistic, yet powerful new capabilities, it does not come without challenges. In this session we will highlight key details of the draft - how it works, who it’s for, what it’s not meant for - as well share useful insights gained through our own experience so far integrating this into our OAuth backend and mobile SDKs.