Identity First Tech

eKYC Interop Testing Event

Sat, 20 Nov 2021 15:22:00 +0000

The FOSS implementation of the OpenID Connect for Identity Assurance specification, eKYC Hub, is now planned to take part in the eKYC Interop Testing. The aim of the eKYC Interop Testing Event is to bring implementers of OpenID Connect for Identity Assurance - relying parties and identity providers - together to gather experience regarding real-world interoperability of their implementations. One cornerstone of the testing will be the official eKYC test suite provided by the OpenID Foundation.

For Identity First, this will be a fantastic opportunity to check compliance of our framework with the specification and integrate with other relying parties. We will use the results of the testing to improve our specification and collect feedback from the identity community.

The eKYC Hub framework will tested when integrated with another FOSS IDP - KeyCloak and will take part in the interop as the Identity Provider. More details around our participation in the interop testing as well as demo accounts that can be used to access eKYC Hub-based IDP will be published after 22 Nov 2021. Details about the interop testing itself can be found on the OpenID website at https://openid.net/wg/ekyc-ida/. The results of the testing are planned to be published and discussed during this year’s OAuth Security Workshop.

We encourage other identity enthusiasts to test the framework using other IDP implementations. You can download the source code for the framework at https://github.com/identityfirst/eKYC-Hub.

eKYC Hub with support for the latest version of the OIDC specification

Sat, 20 Nov 2021 10:00:00 +0000

The FOSS implementation of the OpenID Connect for Identity Assurance specification, eKYC Hub, has now been updated to support the recent version of the specification, which is available here https://openid.net/specs/openid-connect-4-identity-assurance-1_0.html.

The source code repository for the eKYC Hub can be found at https://github.com/identityfirst/eKYC-Hub.

Open Source eKYC Framework - eKYC Hub

Sun, 07 Mar 2021 10:39:56 +0000

The Identity First Tech community releases a free and open-source framework, called eKYC Hub, that implements the OpenID Connect for Identity Assurance specification and can be used by any Identity Provider to allow for exchange of verified user attributes with client applications.

The source code repository for the eKYC Hub application can be found at https://github.com/identityfirst/eKYC-Hub.

The eKYC Hub implements the OpenID Connect for Identity Assurance 1.0 which is published at https://openid.net/specs/openid-connect-4-identity-assurance-1_0-ID2.html. The framework allows for integration with eKYC data providers (verification services).

The released open-source code mainly provides the following: 1) Provides an integration layer between the IDP and the different verification services - this allows for the user to verify different data attributes and store them within the Hub. 2) Provides an interface allowing clients to request and receive verified attributes from the Identity Provider using the standard OpenID Connect for Identity Assurance protocol.

In the repository, you can also find a demo client application as well as an example integration of the eKYC Hub with an open source Identity Provider - KeyCloak. You will need to have Docker installed to run the demo.

The eKYC Hub has been implemented with Passbase - one of the easy-to-use verification services which provides an SDK and RESTful API for verifying end user data. Other providers can be used depending on requirements.

All provided code is open-source and available under the Apache 2.0 license. We welcome feedback as well as contributions to the framework.

Identity First Tech Community Launches

Sun, 07 Mar 2021 09:39:56 +0000

The Identity First Tech community officially launches. The aim of the community is to gather security and identity professionals from around the world to exchange and promote knowledge on the use of identity technology in building reliable and secure systems. Identity is the foundational building block when it comes to security, yet it is often not prioritised when applications and systems are being developed.

The community has been founded by two professionals with vast experience in identity and access management - Maciej Machulak and Michal Kepkowski.

Dr. Maciej Machulak currently leads enterprise architecture for IAM at HSBC. In the past, Maciej worked for various companies in the identity and access management space and co-authored such specification as the award-winning UMA protocol (Kantara Initiative) or two OAuth-related specifications used in Open Banking (IETF).

Michal Kepkowski is a senior IAM developer with real love for backend and open source technologies. For the last few years, Michal has been leading security development teams at numerous companies. He worked with open source IAM platforms including Keycloak, Gluu and WSO2. Michal is working on his PhD at the Cyber Security Hub at Macquarie University in Sydney, Australia - his research focuses on authentication protocols including FIDO2.

We welcome contributions to the community - reach out if you’re interested to join!