OIDF welcomes CISA and NIST’s new guidance on token security
The Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST) have released Interagency Report 8587: Protecting Tokens and Assertions from Forgery, Theft, and Misuse, as announced by CISA and NIST respectively. The report sets out how federal agencies and cloud service providers should defend identity infrastructure against increasingly sophisticated […]
Public Review Period for Proposed OpenID CAEP Interoperability Profile Final Specification
UPDATE: September 15, 2026 — the Shared Signals working group agreed via consensus on the working group call on Tuesday, September 15, 2026 to address the recommended updates and then re-start the 15-day working group review followed by the 60-day review required for Final Specifications. The working group will address these updates in the coming […]
CrowdStrike joins the OIDF as a Sustaining Corporate Member
The OpenID Foundation is pleased to welcome CrowdStrike as a new Sustaining Corporate Member. CrowdStrike is a global cybersecurity leader whose CrowdStrike Falcon® platform delivers real-time threat detection, endpoint protection, and high-fidelity security intelligence across modern enterprise environments. CrowdStrike brings with it significant expertise in real-time threat detection and security threat intelligence. As identity has […]
Top firms test interoperability of final SSF and CAEP
The OpenID Foundation and hosting partner FIDO Alliance brought together implementers of the newly finalized Shared Signals Framework (SSF) and Continuous Access Evaluation Profile (CAEP) specifications to demonstrate interoperability at the Authenticate 2025 conference in Carlsbad, California, earlier this month (October 13-15, 2025). The Shared Signals Framework (SSF) and Continuous Access Evaluation Profile (CAEP) enable […]
OIDF applauds new FIDO and Shared Signals whitepaper
The OpenID Foundation welcomes the publication of a new whitepaper from the FIDO Alliance that examines how FIDO authentication and the Shared Signals Framework (SSF) work together to address enterprise security challenges. We recognize the significant effort by the FIDO Enterprise Deployment Working Group to illustrate how aligned our specifications are, and we welcome the […]
PRESS RELEASE: OpenID Foundation finalizes global standards for real-time identity security
Industry wide adoption of standardized security event sharing now possible. Three specifications to enable instant security coordination across all connected systems worldwide. This crucial development will make Zero Trust architectures achievable at global scale. San Ramon, CA, 16 September 2025 – The OpenID Foundation (OIDF), a global leader in open identity standards, has approved […]
How SSF/CAEP and STIX/TAXII Secure Different Fronts
By Shared Signals Framework WG Contributor, Apoorva Deshpande, Okta In the realm of cybersecurity, there are two critical sets of frameworks that serve distinct yet vital roles in how organizations share and act upon security information – the Shared Signals Framework (SSF), with its Continuous Access Evaluation Protocol (CAEP), and the Trusted Automated eXchange of […]
Three Shared Signals Final Specifications Approved
The OpenID Foundation membership has approved the following three specifications as an OpenID Final Specifications: OpenID Shared Signals Framework: https://openid.net/specs/openid-sharedsignals-framework-1_0-final.html OpenID CAEP: https://openid.net/specs/openid-caep-1_0-final.html OpenID RISC: https://openid.net/specs/openid-risc-1_0-final.html A Final Specification provides intellectual property protections to implementers of the specification and is not subject to further revision. These three Final Specifications are the product of the OpenID Shared […]
Juggling with fire made easier: Provisioning with SCIM
Mike Kiser and Jen Schreiber Beyond the immediate promise of the Shared Signals Framework in managing live sessions through CAEP events, an event-based approach offers a compelling path forward for addressing longer-term identity challenges. One such challenge is identity lifecycle management, or provisioning and deprovisioning. Challenges of provisioning Many underestimate the challenges of provisioning; for […]
How AuthZEN, and Shared Signals & CAEP complement each other
Most cyber attacks leverage identities. These standards are our best defense against such attacks. Co-authored by Atul Tulshibagwale, CTO of SGNL, Co-chair of Shared Signals Working Group, and Corporate Board Member of OpenID Foundation, and Omri Gazitt, co-founder & CEO of Aserto and co-chair of AuthZEN Working Group. These days, most cyber attacks compromise employee […]