Identity standards association the OpenID Foundation has unveiled a certification programme that will enable organizations to ensure that their OpenID Connect implementations conform to specified profiles of the OpenID Connect standard.The OpenID Connect Certification aims to provide assurances to the global community of developers that the Internet identity services that certifying organizations have deployed reliably conform to the OpenID Connect standard, the body said in a statement.Google, Microsoft, ForgeRock, Ping Identity, Nomura Research Institute, and PayPal are the first industry leaders to participate in the OpenID Connect Certification program and certify that their implementations conform to one or more of the profiles of OpenID Connect standard."The rapid adoption of OpenID Connect worldwide required us to create light-weight certification processes to meet the growing volume, velocity and variety of online transactions," said Don Thibeau, Executive Director of the OpenID Foundation. "Self-certification is an important tool created and vetted by industry leaders. These intense competitors have come together to build a more secure and trusted Internet identity ecosystem."The OpenID Connect Certification program is based on self-certification – a formal public declaration by an entity that its specific identified deployment of a product or service meets the requirements of specified conformance profiles of the OpenID Connect standard, as demonstrated by passing a set of self-administered conformance tests for those profiles.With self-certification, the organization implementing an OpenID Connect deployment tests its own deployment via the OpenID Connect Conformance Test Suite software and verifies that it conforms to one or more defined OpenID Connect profiles.Once the tests for a profile are successfully completed, the organization signs and submits to the OpenID Foundation a Certification of Conformance attesting that it successfully completed the software tests, and asserting that its deployment conforms to the designated OpenID Connect profile.Following submission of the required materials, the self-certifications are published. These certifications are also registered by the OpenID Foundation at the Open Identity Exchange's publically accessible identity registry, known as OIXnet."As a leader in payment services, PayPal is continually investing in its security infrastructure to ensure consumers have a seamless experience whether they're on their mobile, online or in store. We have always embraced open standards, and this initiative further raises the bar on assurance for our consumers when they use PayPal across the digital ecosystem," said Raj Mata, Sr. Director, Platform Product Management. "PayPal is excited to be part of this effort to make interoperable digital identity a reality across platforms and vendors."
Recent Articles
- Securing identity documents around the world, with Troy Group’s Mark Bond and Jean Cavalier
- The world’s most important event in identity. 115+ countries. One room 🌎
- 44 government recommendations on the AI response in Healthcare
- Quantum will “break cryptography” encryption in federal systems by 2030, GAO finds
- Michelle Wilson on digital credentials, document security, and global standards
Recent Video
- Securing identity documents around the world, with Troy Group’s Mark Bond and Jean Cavalier
- EY treats IAM as a holistic business capability
- Arkion wins most innovative start-up!
- TSA: Integrating generative and predictive AI into checkpoint screening
- Growing mDL adoption for Login.gov remote onboarding
