{"id":2849,"date":"2026-05-11T12:15:09","date_gmt":"2026-05-11T19:15:09","guid":{"rendered":"https:\/\/self-issued.info\/?p=2849"},"modified":"2026-05-11T12:15:09","modified_gmt":"2026-05-11T19:15:09","slug":"final-1-1-openid-federation-specs","status":"publish","type":"post","link":"https:\/\/self-issued.info\/?p=2849","title":{"rendered":"Final 1.1 OpenID Federation Specs"},"content":{"rendered":"

\"OpenIDI’m pleased to report that the Final 1.1 OpenID Federation specifications have been published<\/a>. These meet the demand for cleanly separating the protocol-independent OpenID Federation functionality from the protocol-specific OpenID Federation functionality for OpenID Connect.<\/p>\n

As I described<\/a> when these specs were first published, the OpenID Federation 1.0<\/a> specification contains two kinds of functionality:<\/p>\n

    \n
  1. Protocol-independent federation functionality used for establishing trust and applying policies in multilateral federations, and<\/li>\n
  2. Protocol-specific federation functionality that can be used by OpenID Connect and OAuth 2.0 deployments to apply the protocol-independent federation functionality.<\/li>\n<\/ol>\n

    At the urging of implementers and working group members, we created new specifications splitting the two kinds of functionality apart. They are:<\/p>\n

      \n
    1. OpenID Federation 1.1<\/a> (protocol-independent)<\/li>\n
    2. OpenID Federation for OpenID Connect 1.1<\/a> (protocol-specific)<\/li>\n<\/ol>\n

      Together, they are equivalent to OpenID Federation 1.0, by design. No functionality is added or removed from that present in 1.0. Rather, it’s factored into protocol-independent and protocol-specific specifications. You can use the 1.0 and 1.1 specs interchangeably. We also intentionally kept the 1.1 section numbers aligned with 1.0 to make them easier to use together.<\/p>\n

      Reading every line of the 1.0 spec to perform the split had the additional benefit of identifying editorial improvements to apply to the 1.0 spec before it became final. I intentionally started the split while 1.0 is still in the 60-day review to become final<\/a> exactly so improvements identified could be applied both to the original and the split specs. OpenID Federation 1.0 draft 48<\/a> applied those improvements.<\/p>\n

      As background for this work, several people had suggested splitting the two apart into separate specifications – particularly once the core federation functionality started being used with protocols other than OpenID Connect, such as with digital credentials<\/a>. There was a discussion about this possibility at the Internet Identity Workshop in the Fall of 2024<\/a>. During the April 2025 Federation Interop event<\/a> at SUNET, there was consensus to do the split after finishing OpenID Federation 1.0. And now it’s done!<\/p>\n

      This split is intended make the OpenID Federation functionality easier to navigate and apply. Enjoy implementing and deploying!<\/p>\n

      Thanks to the SIROS Foundation<\/a> for sponsoring my work on creating the 1.1 Federation specs!<\/p>\n","protected":false},"excerpt":{"rendered":"

      I’m pleased to report that the Final 1.1 OpenID Federation specifications have been published. These meet the demand for cleanly separating the protocol-independent OpenID Federation functionality from the protocol-specific OpenID Federation functionality for OpenID Connect. As I described when these specs were first published, the OpenID Federation 1.0 specification contains two kinds of functionality: Protocol-independent […]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7,14,25],"tags":[],"class_list":["post-2849","post","type-post","status-publish","format-standard","hentry","category-federation","category-openid","category-specifications"],"_links":{"self":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts\/2849","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2849"}],"version-history":[{"count":3,"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts\/2849\/revisions"}],"predecessor-version":[{"id":2852,"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts\/2849\/revisions\/2852"}],"wp:attachment":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2849"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2849"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2849"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}