The OpenID Foundation (OIDF) and the Kantara Initiative have signed a Memorandum of Understanding (MoU) designating Kantara as an Authorized Auditor for the Foundation’s newly independent conformance testing program.
Under the agreement, Kantara will be responsible for assessing organizations that apply to become Approved Testing Service Providers. These providers are the entities that evaluate vendor products for conformance to OpenID specifications, ensuring that digital identity solutions interoperate correctly and securely across the global ecosystem.
As the Authorized Auditor, Kantara will conduct due diligence on applicants and perform structured assessments using OIDF’s Requirements and Testing Service Assessment Criteria. The collaboration builds on OIDF’s recent efforts to expand its conformance services, which included the signing of an initial cohort of testing providers such as BixeLab, Fime, and the FIDO Alliance.
“Kantara’s deep expertise in measuring assurance in identity and authentication complements the Foundation’s deep expertise in providing effective tools to implementers for self-assessing conformance,” said Eve Maler, Board Member at the Kantara Initiative.
The move represents a significant step in formalizing the oversight of digital identity standards. Kantara is well established in the trust framework space, having recently been accredited as the first certifier for the UK’s Digital Identity and Attributes Trust Framework. The organization also recently published service assessment criteria aligned with NIST SP 800-63A Revision 4, further cementing its role as a key assessor for identity assurance.
The OpenID Foundation has been steadily scaling its infrastructure to support the global adoption of identity standards. In late 2025, the Foundation launched conformance testing for global verifiable credential standards, reflecting the growing complexity of the digital ID landscape. By introducing an independent audit layer via Kantara, the OIDF aims to maintain the integrity and consistency of these standards as they are adopted at scale by governments and private sector organizations.
With governments and industries increasingly relying on OpenID specifications for everything from healthcare credentialing to financial services authentication, the formalization of an independent audit layer signals that the standards community is preparing for a scale of adoption that demands more rigorous oversight than self-certification alone can provide.
Sources: OpenID Foundation
–
By Cass Kennedy
