Search

Thank You Too Apple

As the technical lead of the OpenID Foundation Certification Team, I’d like to add a few comments to the open letter that OpenID Foundation Chairman, Nat Sakimura wrote to Apple (https://openid.net/2019/09/30/apple-successfully-implements-openid-connect-with-sign-in-with-apple/). Nat thanks Apple for their recent efforts to make “Sign In with Apple” compliant with the OpenID Connect standard. The OpenID Foundation has always […]

Guest Blog: Implementing App-to-App Authorisation in OAuth2/OpenID Connect

What is app2app? App2app is a mechanism that allows mobile apps performing OAuth2 or OpenID Connect based authentication to offer a much simpler faster flow if the user already has an app provided by the authorization server owner installed on their mobile device. Here’s how it actually looks when I grant the moneyhub app on […]

Welcoming New OpenID Foundation Vice-Chairman

Before I welcome our new Vice-Chairman, on behalf of the OpenID Foundation, I would like to thank Adam Dawes of Google who has served on the Board of Directors for years as Vice-Chairman. Adam’s contributions to the board, the community and his leadership of Working Groups, most recently the groundbreaking work of RISC, are much […]

OIDF Workshop at Verizon Media – September 30, 2019

Verizon Media hosted this OpenID Foundation Workshop on Monday, September 30, 2019 in Sunnyvale, CA. It preceded the Internet Identity Workshop XXVIX in Mountain View, October 1-3, 2019.   Workshop Agenda & Updates Welcome & Introduction: Lovlesh Chhabra — Verizon Media and Don Thibeau – OpenID Foundation Browser Changes Impacting Identity Flows: George Fletcher – […]

Apple Successfully Implements OpenID Connect with Sign In with Apple

September 30, 2019 Mr. Craig Federighi Apple Senior Vice President of Software Engineering One Apple Park Way Cupertino, CA 95014 RE: Apple Successfully Implements OpenID Connect with Sign In with Apple   Dear Mr. Federighi, As you are likely aware, on behalf of the OpenID Foundation Board of Directors, I published an open letter to you […]

Public Review Period for OpenID Connect for Identity Assurance Specification Started

The OpenID OpenID Connect Working Group recommends approval of the following specification as an OpenID Implementer’s Draft: OpenID Connect for Identity Assurance 1.0 An Implementer’s Draft is a stable version of a specification providing intellectual property protections to implementers of the specification. This note starts the 45-day public review period for the specification draft in […]

OpenID Certification Program Expands with the Release of Financial-grade API Client Initiated Backchannel Authentication Profile (FAPI-CIBA) Certification

The OpenID Foundation announced today its expansion of the OpenID Certification program with conformance testing and self-certification of Financial-grade API Client Initiated Backchannel Authentication Profile (FAPI-CIBA) OpenID Providers. The ability to self-certify FAPI-CIBA implementations builds on the availability and success of Financial-grade API (FAPI) certifications whereby a number of vendors including banks have certified their […]

Implementer’s Draft of FAPI Client Initiated Backchannel Authentication (CIBA) Profile Approved

The OpenID Foundation membership has approved the following specification as an OpenID Implementer’s Draft: Financial-grade API: Client Initiated Backchannel Authentication Profile An Implementer’s Draft is a stable version of a specification providing intellectual property protections to implementers of the specification. This is the first Implementer’s Draft of this specification. This specification is a product of […]

Implementer’s Drafts of Two EAP Specifications Approved

The OpenID Foundation membership has approved the following Enhanced Authentication Profile (EAP) specifications as OpenID Implementer’s Drafts: OpenID Connect Token Bound Authentication 1.0 OpenID Connect Extended Authentication Profile (EAP) ACR Values 1.0 An Implementer’s Draft is a stable version of a specification providing intellectual property protections to implementers of the specification. These are the first […]