OpenID Foundation presents at Financial Data Exchange Summit
The OpenID Foundation’s Gail Hodges and Joseph Heenan presented a talk on “If, when, and why to implement the FDX ‘blue’ security profile with FAPI 2.0” on Tuesday April 22nd for the benefit of North American attendees at the Financial Data Exchange’s Spring Global Summit held at the Gaylord National Harbor. This talk is especially […]
FAPI 2.0 Security Profile and Attacker Model Final Specifications Approved
The OpenID Foundation membership has approved the following OpenID Final Specifications: FAPI 2.0 Security Profile: https://openid.net/specs/fapi-security-profile-2_0-final.html FAPI 2.0 Attacker Model: https://openid.net/specs/fapi-attacker-model-2_0-final.html A Final Specification provides intellectual property protections to implementers of the specification and is not subject to further revision. The FAPI Final Specifications are the product of the FAPI Working Group. The voting results […]
Notice of Vote for Proposed FAPI 2.0 Security Profile and Attacker Model Final Specifications
The official voting period will be between Saturday, February 8, 2025 and Saturday, February 15, 2025 (12:00pm PT), once the 60 day review of the specifications has been completed. For the convenience of members who have completed their reviews by then, voting will actually begin on Saturday, February 1, 2025. The FAPI working group page: […]
FAPI 2.0 Conformance Tests Now Support DPoP
The OpenID Foundation is pleased to announce the release of DPoP (Demonstration of Proof-of-Possession, RFC 9449) support in FAPI 2.0 Conformance Tests. Implementers can now certify their solutions with DPoP, adding an additional layer of security for client authentication. This update follows the beta phase and addresses the community’s feedback on DPoP testing. DPoP tests […]
An Outreach Workshop for Open Banking Chile
Mike Leszcz, OpenID Foundation Operations Director This was a hybrid event with some CMF and ecosystem members participating in person in Santiago. OIDF was very fortunate to have founding member and long-time board member, John Bradley with Yubico, representing OIDF in person. The goal of the workshop was to introduce OIDF and OpenID specifications with […]
Announcing the IPSIE Working Group
The OpenID Foundation is delighted to announce the formation of the Interoperability Profiling for Secure Identity in the Enterprise (IPSIE) Working Group. This WG aims to tackle key challenges that underlie identity security in today’s enterprise environments. The Core Challenge Identity and Access Management (IAM) within the enterprise is a multifaceted endeavor, as indicated by […]
Guidance to the CFPB regarding US Open Banking
Authors: Gail Hodges, Joseph Heenan, Dima Postnikov, Mark Haine, Mike Leszcz, Elizabeth Garber Following our May 16 open letter to the Consumer Financial Protection Bureau, the OpenID Foundation has been engaged in discussions about their rule-making on Personal Financial Data Rights. This post summarizes our guidance to the CFPB. Why are we engaged? The OpenID […]
Second Implementer’s Draft of Grant Management for OAuth 2.0 Approved
The OpenID Foundation membership has approved the following Financial-grade API (FAPI) specification as an OpenID Implementer’s Draft: Grant Management for OAuth 2.0 An Implementer’s Draft is a stable version of a specification providing intellectual property protections to implementers of the specification. This is the first Implementer’s Draft of this specification. The Implementer’s Draft is available […]
OpenID Foundation Announces FAPI-RW App2app Certification Launched
Global interoperability, a common cause among many national and industry groups, seems especially urgent these days, especially in matters of security. Interop requires open standards, a “best idea wins” debate among experts and patience, lots of patience. The Financial-Grade API Working Group has a singular focus on developing its security profile as a complementary component […]
Notice of Vote for Proposed Second Implementer’s Draft of Grant Management for OAuth 2.0
The official voting period will be between Sunday, July 2, 2023 and Sunday, July 9, 2023, once the 45-day review of the specification has been completed. For the convenience of members, voting will actually open on Sunday, June 25, 2023 for members who have completed their reviews by then, with the voting period still ending […]