OpenID Shared Signals Working Group Repository

An open-source Go OpenID Shared Signals Framework Receiver.

OpenID Shared Signals (SSF/CAEP/RISC) and Security Event Tokens

Standalone OpenID Shared Signals Framework transmitter for self-hosted Authentik deployments.

Quarkus Extensions supporting the Shared Signals Framework (SSF)

Zero Trust IAM — Zanzibar-style ReBAC authorization, passwordless auth (Passkey/DPoP), real-time risk analysis (Kafka Streams), CAEP continuous access evaluation

Go library implementing the OpenID Shared Signals Framework 1.0

HTTP transmission library for Security Event Tokens (SET) with CAEP/SSF support and zero dependencies

Forward SSF events from transmitters to other sinks

JavaScript/TypeScript library implementing RFC 8417 Security Event Tokens (SET) with CAEP and SSF support

Go library implementing the OpenID CAEP 1.0 event vocabulary — typed event payloads registered into go-secevent.

SGNL is a continuous identity and authorization platform that eliminates standing privilege and makes real-time, context-aware access decisions for both human users and AI agents. It sits at the center of an enterprise IAM architecture, dynamically adapting permissions as conditions change and revoking sessions in real time.