caep

OpenID Shared Signals Working Group Repository

An open-source Go OpenID Shared Signals Framework Receiver.

OpenID Shared Signals (SSF/CAEP/RISC) and Security Event Tokens

LucidFence 2.0 — geofencing UEM local-first en un binario Go. Motor de riesgo explicable. Open source (Apache-2.0). Sin exfiltrar ubicación.

Standalone OpenID Shared Signals Framework transmitter for self-hosted Authentik deployments.

Quarkus Extensions supporting the Shared Signals Framework (SSF)

Zero Trust IAM — Zanzibar-style ReBAC authorization, passwordless auth (Passkey/DPoP), real-time risk analysis (Kafka Streams), CAEP continuous access evaluation

Go library implementing the OpenID Shared Signals Framework 1.0

An identity provider and security token service speaking OAuth 2.0/OIDC, SAML, WS-Trust, WS-Federation, Kerberos, LDAP, SCIM, OpenID4VC, SPIFFE, XACML, GNAP and more. Born as the identity protocol debugger's test-suite STS; now growing into a production identity provider, with a development mode for testing clients.

HTTP transmission library for Security Event Tokens (SET) with CAEP/SSF support and zero dependencies

Forward SSF events from transmitters to other sinks

TypeScript SDK for the Authlete Arena API — build Shared Signals Framework (SSF) transmitters and receivers. Published as @authlete/arena.

JavaScript/TypeScript library implementing RFC 8417 Security Event Tokens (SET) with CAEP and SSF support

Go library implementing the OpenID CAEP 1.0 event vocabulary — typed event payloads registered into go-secevent.

SGNL — independent third-party profile of a public API surface, by API Evangelist. SGNL is a continuous identity and authorization platform that eliminates standing privilege and makes real-time, context-aware access decisions for both human users and AI agents. It sits at the center of an enterprise IAM architecture, dynamically adapting permissio