OpenID Foundation
The OpenID Foundation is a nonprofit international standards organization responsible for maintaining and promoting open identity authentication protocol standards, including OpenID Connect and OAuth. Its membership spans major technology companies and identity management vendors.
Timeline (last 90 days)
W3C's Verifiable Credentials (VC) and Decentralized Identifier (DID) specifications, as well as the OpenID Foundation's GNAP protocol, are all attempting to make authorization boundaries machine-readable claims that can be independently verified by third parties.
The white paper argues that agent permissions should dynamically converge based on task context, rather than inheriting the user's full permissions in a one-time grant.
The white paper advocates extending mature protocols such as OAuth 2.0 and OpenID Connect to adapt to agent scenarios, rather than overturning existing standards.
The white paper argues that agents should have their own independently verifiable identity credentials, rather than simply reusing user credentials.
The OpenID Foundation has published a white paper focused on identity management for Agentic AI.
The white paper argues that the entire authorization delegation chain from human users to agents at all levels needs to be expressed in a cryptographically verifiable manner.
The white paper is currently still in a relatively early stage, with limited community discussion activity and only a small number of comments on HackerNews.
The white paper favors using access tokens for agents that are extremely narrow in scope, extremely short in validity, and bound to specific task contexts.
All Facts (8)
W3C's Verifiable Credentials (VC) and Decentralized Identifier (DID) specifications, as well as the OpenID Foundation's GNAP protocol, are all attempting to make authorization boundaries machine-readable claims that can be independently verified by third parties.
50%UnverifiedThe white paper argues that agent permissions should dynamically converge based on task context, rather than inheriting the user's full permissions in a one-time grant.
50%UnverifiedThe white paper advocates extending mature protocols such as OAuth 2.0 and OpenID Connect to adapt to agent scenarios, rather than overturning existing standards.
50%UnverifiedThe white paper argues that agents should have their own independently verifiable identity credentials, rather than simply reusing user credentials.
50%UnverifiedThe white paper argues that the entire authorization delegation chain from human users to agents at all levels needs to be expressed in a cryptographically verifiable manner.
50%UnverifiedThe white paper is currently still in a relatively early stage, with limited community discussion activity and only a small number of comments on HackerNews.
50%UnverifiedThe white paper favors using access tokens for agents that are extremely narrow in scope, extremely short in validity, and bound to specific task contexts.
50%UnverifiedThe OpenID Foundation has published a white paper focused on identity management for Agentic AI.
50%