Search

Public Review Period for Proposed Final OpenID Connect for Identity Assurance Specifications

The OpenID Foundation’s eKYC & IDA Working Group recommends approval of the following specifications as OpenID Final Specifications. OpenID Connect for Identity Assurance 1.0 Other formats: ZIP, XML, MD OpenID Connect for Identity Assurance Claims Registration 1.0 Other formats: ZIP, XML, MD OpenID Identity Assurance schema definition 1.0 Other formats: ZIP, XML, MD A Final […]

Fourth Implementer’s Draft of OpenID Federation Approved

The OpenID Foundation membership has approved the following specification as an OpenID Implementer’s Draft: OpenID Federation 1.0 This is the fourth Implementer’s Draft of this specification. An Implementer’s Draft is a stable version of a specification providing intellectual property protections to implementers of the specification. This specification is a product of the OpenID Connect Working […]

Guidance to the CFPB regarding US Open Banking

A slide summarizing the key benefits of the FAPI family of specifications: security, interoperability, privacy, competition.

Authors: Gail Hodges, Joseph Heenan, Dima Postnikov, Mark Haine, Mike Leszcz, Elizabeth Garber  Following our May 16 open letter to the Consumer Financial Protection Bureau, the OpenID Foundation has been engaged in discussions about their rule-making on Personal Financial Data Rights. This post summarizes our guidance to the CFPB. Why are we engaged? The OpenID […]

Notice of Vote for Proposed Fourth Implementer’s Draft of OpenID Federation

The official voting period will be between Wednesday, July 17, 2024 and Wednesday, July 24, 2024 (11:59:59PM PT), once the 45 day review of the specification has been completed. For the convenience of members who have completed their reviews by then, voting will actually begin on Wednesday, July 10, 2024. The OpenID Connect Working Group […]

Public Review Period for Proposed Fourth Implementer’s Draft of OpenID Federation

The OpenID Connect Working Group recommends approval of the following specification as an OpenID Implementer’s Draft: OpenID Federation 1.0 This would be the fourth Implementer’s Draft of this specification. An Implementer’s Draft is a stable version of a specification providing intellectual property protections to implementers of the specification. This note starts the 45-day public review […]

Third Implementer’s Draft of OpenID Connect Federation Specification Approved

The OpenID Foundation membership has approved the following specification as an OpenID Implementer’s Draft: OpenID Connect Federation 1.0 An Implementer’s Draft is a stable version of a specification providing intellectual property protections to implementers of the specification. This is the third Implementer’s Draft of this specification. This specification is a product of the OpenID Connect […]

Third Public Review Period for OpenID Connect Federation Specification Started

The OpenID Connect Working Group recommends approval of the following specification as an OpenID Implementer’s Draft: OpenID Connect Federation 1.0 This would be the third Implementer’s Draft of this specification. An Implementer’s Draft is a stable version of a specification providing intellectual property protections to implementers of the specification. This note starts the 45-day public […]

OpenID Connect Federation Specification Resulting from a Year of Implementation Experience

The OpenID Foundation held three interop events for implementations of the OpenID Connect Federation specification during 2020. The learnings from each were used to iteratively refine the specification after each round, just as we did when developing OpenID Connect itself. The current specification is the result of the iterative rounds of improvement, informed by the […]

OpenID Connect Federation Draft Incorporating Feedback from First Interop Event

The OpenID Connect Federation specification has been updated to incorporate feedback from developers participating in the first OpenID Connect Federation interop event, which was held online in June 2020. The primary change is to use either signed request objects (JAR) or pushed authorization requests (PAR) for client authentication of automatic registration requests. The new draft […]