AB/Connect WG has produced / is working on the following specifications.
Final Specifications
OpenID Connect Final Specifications:
- OpenID Connect Core – Defines the core OpenID Connect functionality: authentication built on top of OAuth 2.0 and the use of claims to communicate information about the End-User
- OpenID Connect Discovery – (Optional) Defines how clients dynamically discover information about OpenID Providers
- OpenID Connect Dynamic Registration – (Optional) Defines how clients dynamically register with OpenID Providers
- OAuth 2.0 Multiple Response Types – Defines several specific new OAuth 2.0 response types
- OAuth 2.0 Form Post Response Mode – (Optional) Defines how to return OAuth 2.0 Authorization Response parameters (including OpenID Connect Authentication Response parameters) using HTML form values that are auto-submitted by the User Agent using HTTP POST
- OpenID 2.0 to OpenID Connect Migration 1.0 – (Optional) Defines how to migrate from OpenID 2.0 to OpenID Connect
Implementer’s Drafts
OpenID Connect Implementer’s Dradts:
- Session Management – (Optional) Defines how to manage OpenID Connect sessions, including postMessage-based logout functionality
- Front-Channel Logout – (Optional) Defines a front-channel logout mechanism that does not use an OP iframe on RP pages
- Back-Channel Logout – (Optional) Defines a logout mechanism that uses direct back-channel communication between the OP and RPs being logged out
Drafts
- OpenID Connect Profile for SCIM Services – (Optional) Defines how to use SCIM with OpenID Connect
- OpenID Connect Federation – (Optional) Defines how sets of OPs and RPs can establish trust by utilizing a Federation Operator
Repository
Active Members (past and present)
- Nat Sakimura (Chair)
- Mike Jones (Co-Chair)
- John Bradley (Co-Chair)
- Anthony Nadalin (tonynad@microsoft.com), Microsoft
- Andreas Akre Solberg (andreas.solberg@uninett.no), UNINET
- Axel Nennker (axel.nennker@telekom.de), Deutsche Telekom
- Breno de Medeiros (breno@gmail.com), Google
- Casper Biering (cb@peercraft.com), Peercraft
- Chuck Mortimore (cmortimore@salesforce.com), Salesforce
- David Recordon (dr@fb.com), Facebook
- Edmund Jay (ejay@mgi1.com), Illumila
- George Fletcher (george.fletcher@corp.aol.com), AOL
- Hideki Nara (hideki.nara@gmail.com), Takt Communications
- Johnny Bufu (jbufu@janrain.com), Janrain
- John Bradley (jbradely@pingidentity.com), Ping Identity
- Justin Richer (jricher@mitre.org), Mitre
- Luke Shepard (lshepard@fb.com), Facebook
- Michael B. Jones (mbj@microsoft.com), Microsoft
- Nat Sakimura (n-sakimura@nri.co.jp), Nomura Research Institute, Ltd.
- Nov Matake (nov@matake.jp), YOauth.jp
- Pamela Dingle (pdingle@pingidentity.com), Ping Identity
- Paul Tarjan (pt@fb.com), Facebook
- Phil Hunt (phil.hunt@oracle.com), Oracle
- Rich Levinson (rich.levinson@oracle.com), Oracle
- Roland Hedberg (roland@catalogix.se), Independent
- Ryo Itou (ritou@yahoo-corp.jp), Yahoo! Japan
- Torsten Lodderstedt (t.lodderstedt@telekom.de), Deutsche Telekom
- Vladimir Dzhuvinov (vladimir@nimbusds.com), Nimbus Directory Service