OpenID Foundation at GDC26: sessions, speakers and highlights
Governments, international organisations, standards bodies and industry came together in Geneva for the recent Global Digital Collaboration Conference (GDC26). The event is an important forum for shaping the future of digital public infrastructure, and the OpenID Foundation was proud to play an active role, taking part as a co-organiser. Over three days, the OpenID Foundation […]
Closing the assurance gap
NIST SP 1800-42A, the OpenID identity proofing extension, and the FinCEN FAQs By Juliana Cafik, Identity Standards & Solutions Architect and independent expert contributing to the OpenID Foundation’s eKYC & IDA Working Group. On the heels of the National Cybersecurity Center of Excellence Phase 1 results, NIST has published draft SP 1800-42A, a practice guide […]
Defakto joins the OIDF as a Sustaining Corporate Member
The OpenID Foundation is pleased to welcome Defakto Security as a new Sustaining Corporate Member. Defakto secures the non-human identities driving the next generation of cloud, automation, and AI. Global enterprises rely on Defakto to eradicate long-lived secrets in favor of short-lived, cryptographically verifiable identities. As cloud, automation and AI deployments […]
Lessons from Denmark’s CPR breach
Why knowledge-based authentication is inadequate and what to do instead On October 5, 2026, the Danish government announced that unauthorized parties had accessed data on about 8.8 million people in the Central Person Register (CPR), Denmark’s national civil register. The data includes the names, addresses and CPR numbers of residents, people living abroad and people […]
OpenID Foundation names Biometric Update as media partner
The OpenID Foundation is pleased to announce Biometric Update as the official media partner for the forthcoming OpenID Well-Known Conference. Taking place in London on February 2-4, 2027, this is the OpenID Foundation’s first global conference. Its goal is to help digital identity and credential ecosystems move from implementation to widespread adoption. The conference will […]
ADT CG responds to HESC research security consultation
How can institutions be confident about who is taking part in academic research, and whether their link to an institution is still valid? Australia currently has no common national baseline for answering that question. This is one of the key issues raised by the Australian Digital Trust Community Group (ADT CG) in its response to […]
OIDF publishes threat model for cross-boundary AI agents
Organizations are rolling out AI agents faster than they are building the systems needed to identify those agents and control what they are allowed to do. One of the key points at which this becomes a problem is when an agent crosses a security boundary. For example, an agent hosted with one provider may need […]
The OpenID Foundation responds to Australia’s privacy reform consultation
The OpenID Foundation, through its Australian Digital Trust Community Group (ADT CG), has responded to the Australian Government’s consultation on the Exposure Draft Privacy Amendment (Personal Data Protection) Bill 2026. The consultation seeks to modernize and strengthen Australia’s privacy laws. The response, which can be found here, addresses how the Bill would work in practice […]
OIDF responds to EMVCo Agentic Payments framework draft
The OpenID Foundation has submitted comments to EMVCo on the EMV® Agentic Payments – Framework for Specifications v1.0 DRAFT. As AI agents increasingly act on behalf of consumers, every payment raises an identity question: who is the agent, and what has the consumer authorized it to do? The line between payments and identity is beginning […]
OpenID Connect Ephemeral Subject Identifier 1.0 Final Specification Approved
The OpenID Foundation membership has approved the following specification as an OpenID Final Specification: OpenID Connect Ephemeral Subject Identifier 1.0: https://openid.net/specs/openid-connect-ephemeral-subject-identifier-1_0-final.html A Final Specification provides intellectual property protections to implementers of the specification and is not subject to further revision. This specification is a product of the OpenID Connect Working group. The voting results were: […]