Tootfinder

🌐 eduGAIN piloting use of OpenID Federation
eduGAIN has relied on SAML for years, but modern protocols like OpenID Connect 1.0 & OAuth 2.0 are now industry standards.
The eduGAIN service is running a 12-month pilot to test how OpenID Federation could be used as the future trust technology for eduGAIN, alongside SAML.
🔗 Read more in the latest #CONNECT50 article by Lars Fugl…

Automated Repair of OpenID Connect Programs (Extended Version)
Tamjid Al Rahat, Yanju Chen, Yu Feng, Yuan Tian
https://arxiv.org/abs/2510.02773 https://arx…

Automated Repair of OpenID Connect Programs (Extended Version)
OpenID Connect has revolutionized online authentication based on single sign-on (SSO) by providing a secure and convenient method for accessing multiple services with a single set of credentials. Despite its widespread adoption, critical security bugs in OpenID Connect have resulted in significant financial losses and security breaches, highlighting the need for robust mitigation strategies. Automated program repair presents a promising solution for generating candidate patches for OpenID imple…

OpenID Connect for Agents (OIDC-A) 1.0: A Standard Extension for LLM-Based Agent Identity and Authorization
Subramanya Nagabhushanaradhya
https://arxiv.org/abs/2509.25974 https:…

OpenID Connect for Agents (OIDC-A) 1.0: A Standard Extension for LLM-Based Agent Identity and Authorization
OpenID Connect for Agents (OIDC-A) 1.0 is an extension to OpenID Connect Core 1.0 that provides a comprehensive framework for representing, authenticating, and authorizing LLM-based agents within the OAuth 2.0 ecosystem. As autonomous AI agents become increasingly prevalent in digital systems, there is a critical need for standardized protocols to establish agent identity, verify agent attestation, represent delegation chains, and enable fine-grained authorization based on agent attributes. Thi…

Do you mysteriously not get emails - not even in your spam folder? If you're on a Microsoft system, this link might let you see emails invisibly held in quarantine: https://security.microsoft.com/quarantine?viewid=Email