The OpenID Foundation is pleased to be a part of the Authenticate 2022 Conference October 17-29, 2022 and the FIDO Member Plenary October 20-21, 2022. Both events are taking place at the Sheraton Grande Seattle, Washington. OpenID Foundation members please check your inbox as a special offer to attend Authenticate and the Plenary in-person as well as a link to participate virtually in the OIDF sessions during the Plenary have been sent.  

OIDF Session at Authenticate 2022 -- Tuesday, October 18, 2022

1:45 - 2:40pm PT -- The OpenID Foundation Strategy & a Deep Dive on FAPI and the Global Open Banking, Open Data Movement Presenters: Gail Hodges, OpenID Foundation Executive Director and Anoop Saxena, OIDF Member (Intuit) & FAPI Working Group Co-Chair

The OpenID Foundation standards are used today for consumer and enterprise login, open banking, open health, digital identity issuance and acceptance, and other federated identity use cases. We will give a brief overview of the OpenID Foundation’s strategy to serve the global community with its standards and certification capabilities. Then we will do a deep dive on the FAPI security profile in the context of Open Banking and Open Data implementations that are cascading around the world. The FAPI Security profile has been selected by public and private networks in the US, UK, Brazil, Australia, Norway and beyond. They are also a leading contender to enable cross border use cases. Background on FAPI and the global Open Banking, Open Data movement can be found in two OIDF whitepapers published this year: A Primer on the global movement behind Consent-Based movement of Data “Open Banking and Open Data and the Financial Grade API.” (final) https://openid.net/wordpress-content/uploads/2022/03/OIDF-Whitepaper_Open-Banking-Open-Data-and-Financial-Grade-APIs_2022-03-16.pdf A first Editor’s draft on how open banking implementations in different markets can interoperate, and the leading use cases to enable them: “Open Banking and Open Data: Ready to Cross Borders?” – https://openid.net/wordpress-content/uploads/2022/07/OIDF-Whitepaper_Open-Banking-Open-Data_1st-Editors-Draft_2022-07-29.pdf  

OIDF Sessions at FIDO Member Plenary -- Wednesday, October 19, 2022

9:00-9:10 am -- Welcome & Opening Remarks Presenter: Gail Hodges - OpenID Foundation Executive Director 9:10-9:45 am -- Shared Signals & Events: A Secure Webhooks Framework Presenter:  Atul Tulshibagwale - SGNL Lack of interoperability between products from different vendors hampers customer adoption and results in poorer security outcomes. Interoperable standards such as the Continuous Access Evaluation Profile (CAEP) of the Shared Signals and Events (SSE) Framework provide a great way to communicate session assurance changes and other ways in which account and session related information can be conveyed interoperably and asynchronously between parties that share users. Featured by Gartner as an innovation trigger in their 2022 Digital Identity Hype Cycle, CAEP and the SSE framework it relies on is growing in adoption. Learn more about the standard and how to adopt it in your environments in this talk. 9:45-10:20 am -- OpenID for Verifiable Credentials (OpenID4VC): Addressing Self-Sovereign Identity, Decentralized Identity, or User-Centric Identity Presenter: Kristina Yasuda – Microsoft The OpenID Connect for Verifiable Credentials (OpenID4VC) protocol family is facilitating significant adoption of Verifiable Credentials, empowering individuals to take control of their own identity. By using OAuth 2.0 and OpenID Connect, a cornerstone of modern Identity systems as the foundation, OpenID4VC ensures that Verifiable Credentials applications are trusted, secure, interoperable, and easy to deploy. For that reason, OpenID4VC specifications are already being adopted and deployed in a number of implementations, rapidly becoming the foundation of many Verifiable Credentials solutions. OpenID4VC consists of three specifications: Self-Issued OpenID Provider v2 (SIOP v2), OpenID Connect for Verifiable Presentations (OIDC4VP), and OpenID Connect for Verifiable Credential Issuance (OIDC4VCI). They enable existing OAuth 2.0/OpenID Connect Relying Parties to receive Verifiable Presentations and existing OAuth 2.0 Authorization Servers/OpenID Connect OpenID Providers to issue Verifiable Credentials in any credential format including W3C Verifiable Credentials and ISO/IEC 18013-5 mdocs. In this session, we will discuss use cases motivating the work, how these protocols solve the problems, what challenges remain, and how they have come together to weave a web of trust. 10:20-10:55 am -- "A Review of the Global Assured Identity Network (GAIN): One Year On" Presenter:  Elizabeth Garber - Co-Chair GAIN Proof of Concept This session will provide a one-year update on the Global Assured Identity Network (GAIN) initiative including what’s next including seeking your input and contributions as GAIN transitions to focusing on how interoperability in enabled globally.

• What is GAIN
• GAIN progress since 13th September 2021
• GAIN MOU and supporting signatories
• OIDF GAIN PoC
• OIX Global Interoperability WG
• Planned updates to GAIN Paper
• Outlook for the next 6 months
• Wrap up and Call to action

10:55-11:30 am -- OIDF Government Whitepaper Listening Session: "Citizen-Centric Identity Systems" Presenter: Elizabeth Garber – Whitepaper Co-Author The OpenID Foundation is developing a whitepaper for governments and their associated stakeholders with the goal of supporting them in making good decisions when implementing citizen-centric digital identity systems - and to help them understand where OIDC and its extensions fit in. This session will be a facilitated discussion about the key concerns of government when thinking about digital identity:

• The Role of Government
• Key Stakeholders
• Adoption
• Balancing privacy/security/trust
• Resilience
• Economic Benefits
• Technology and Interoperability
• How existing standards fit in

11:30 am-12:05 pm -- OIDF Privacy Whitepaper Listening Session: “Help Design a Scalable Future for Personal Privacy” Presenter: Heather Flanagan - Principal at Spherical Cow Consulting Government-issued digital IDs have the potential for amazing societal impact but getting there from here means bridging the gaps in identity validation, verification, privacy, and control. In this session, we offer an open conversation to gather different perspectives on how policies and protocols need to evolve to help government-issued IDs fill their role in a global privacy-preserving infrastructure. Come join us to be a part of thinking outside the box of today so we can achieve tomorrow’s promise of government-issued IDs as a benefit to all. 12:05-12:30 pm -- Closing Remarks, Open Q&A and Networking Presenter: Gail Hodges – OpenID Foundation Executive Director