Openid Foundation

A number of oidf specifications were approved in 2024, as well as a formal security analysis on one openid specification:the first in-depth security analysis of openid for verifiable credentials has been completed, with the goal of increasing confidence in the security of these specifications. The formal security analysis includes the protocols openid for verifiable credential issuance (oid4vci) and openid for verifiale presentations (oid4vp,) both part of the openid for verifiale credentials family.-implementer's draft of openid for verifiable credential issuance approved - april 2024-fourth implementer's draft of openid federation approved - july 2024-three shared signals specifications approved as openid implementer's drafts: openid shared signals framework specification 1.0, openid continuous access evaluation profile 1.0, and caep interoperability profile 1.0 - october 2024-three openid connect for identity assurance final specifications approved: open id identity assurance schema definition 1.0, openid connect for identity assurance claims registration 1.0, and openid connet for identity assurance 1.0 - october 2024-authzen authorization api 1.0 implementer's draft approved - november 2024-third openid4vp implementer's draft approved - december 2024

The oidf certification program continued to evolve and grow in 2024: -the oidf certification program added a new java developer to the team in may 2024, this developer supports the growing number of conformance tests to be developed.-continued global open banking/open data outreach in 2024 highlighting the value of conformance to openid standards via certification.-development and deployment of new conformance test suites continued in 2024. Ongoing maintenance of existing conformance test suites was also a priority.-announced the release of dpop (demonstration of proof-of-possession rfc 9449) support in fapi 2.0 conformance tests in november 2024. Implementer's can now certify their solutions with dpop, adding an additional layer of security for client authentication. This update follows the beta phase and addresses the community's feedback on dpop testing.

2024 strategic initiatives: oidf is a founding member of the sustainable and interoperable digital identity (sidi) hub. Interoperability is crucial for a fair and inclusive digital society. By coordinating the digital identity activities already underway abnd defining a governance structure for digital structure for digital identity credentials, the sidi hub is helping accelerate the path to cross-border interoperabibility.in march 2024, at the gartner identity and access management summit in london, industry leaders showcased successful, interoperable implementations of the shared signals framework (ssf) and continuous access evaluation profile (caep). This included okta, sailpoint, and cisco as well as security startups sgnl, vericlouds, and hilisoft. The ssf suite of standards underpins zero-trust architectures and promises to enable a more secure digital future for everyone.oidf authzen working group announced in may 2024 that select leading authorization vendors successfully achieved conformance with the authzen request/response protocol, marking a significant step in bringing interoperability and standardization to the authorization market. The industry leaders include 3edges, aserto, axiomatics, cerbos, permit.io, rock solid knowledge, sgnl.ai, strata identity, and thales, demonstrating their commitment to documenting common authorization patterns, defining standard mechanisms for communication between authorization components and recommending best practices for developing secure applications.as part of oidf's open banking ecosystem outreach and support efforts in 2024, oidf responded to the consumer financial protection board (cfpb) in the u,s regarding the 1033 rule focused on personal financial data rights in the u,s. Oidf followed up its formal response with an open letter in may 2024 in light of submissions by other commenters and subsequent discussions with parties in the ecosystem, oidf then summarized its guidance ot the cfpb in a blog post in july 2024 that noted oidf is responding to a call from those seeking to enhance the security of u,s. Digital infrastructure.on june 18,2024, oidf's executive director, gail hodges, spoke about digital identity at the g20 in brazil during the digital government and inclusion workshop.oidf announced in september 2024 that it is one of 15 parties to a collaborative research and development agreement (crada) with the national cybersecurity council center of excellence. This project will accelerate digital identity adoption in the united states. Its first use case supports financial institutions to meet their know-your-customer requirements using mobile drivers license (mdl) technologies and standards.