OpenID Foundation unveils new independent testing plan
The OpenID Foundation has appointed four organisations as testing service providers for a new independent conformance test programme, scheduled to launch in the second quarter of 2026.
FIDO Alliance, Fime, Raidiam and TrustID Solutions will help develop and validate the testing approach ahead of the launch. The organisations have signed a memorandum of understanding with the OpenID Foundation.
The initiative extends the Foundation's conformance work beyond its existing self-certification service, which has supported more than 4,500 certified implementations worldwide.
Independent Testing
The new programme adds independent testing as another option for ecosystems that rely on OpenID Foundation specifications. As digital identity deployments expand and move into operational use, it provides an additional conformance pathway.
Testing service providers will validate that implementations conform to the relevant specifications under the programme's rules. More providers are being onboarded, with further announcements planned as the programme progresses.
Conformance testing sits alongside specification development in digital identity schemes. Governments and industry programmes often set technical and operational rules for identity providers, wallet operators, relying parties and other participants. Conformance frameworks aim to keep implementations consistent and reduce the risk of divergent interpretations across a market.
Regulatory Fit
The Foundation positioned the independent programme as a response to regulatory and sovereignty demands across jurisdictions. It said the additional option allows ecosystems to design and tailor conformance programmes to local legal requirements.
Digital identity programmes often operate under national legislation and sector rules. Some jurisdictions mandate where data is stored, how components are audited, and which organisations may provide assurance services. An independent testing option gives scheme operators another way to meet those requirements while aligning with the same technical specifications.
The Foundation also noted that more jurisdictions are adopting the same core specifications, with digital identity moving from pilots into production across 38 jurisdictions.
Gail Hodges, Executive Director of the OpenID Foundation, said the shift is increasing the need for testing infrastructure as schemes expand.
"Governments and organizations across 38 jurisdictions, including the EU, UK, US, and the Balkans, have committed to the same core OpenID Foundation specifications for their digital identity and open data programs. As these programs move from pilots to full deployment, a globally recognised conformance pathway becomes essential for ecosystems that must meet local regulatory and sovereignty requirements," Hodges said.
Existing Footprint
Self-certification programmes typically allow implementers to run tests and submit results through a defined process. Independent programmes add another layer of assurance and can involve third-party testing and verification under a governance framework. The Foundation did not set out detailed operating rules in its announcement, including how each testing service provider will run tests, how results will be published, or how disputes will be handled.
The appointed organisations operate in adjacent areas of digital identity and security assurance. FIDO Alliance is known for authentication standards and certification activity around passkeys and related technologies. Fime works in payments and identity testing and consulting. Raidiam operates services linked to open data ecosystems. TrustID Solutions works in identity assurance and testing services.
Market Context
Governments and regulated industries have increased activity around digital identity frameworks in recent years. Many programmes use OpenID Connect and related profiles for authentication and authorisation flows. Open banking and open data initiatives also often rely on OAuth2-based approaches and profiles such as Financial-grade API.
As deployments scale, conformance becomes a practical issue for scheme owners and suppliers. Technical interoperability is a prerequisite for cross-organisation use cases, while assurance levels and auditability matter for regulated adoption. Conformance frameworks also affect procurement, since buyers often look for demonstrable adherence to a specification.
The programme is scheduled to launch in the second quarter of 2026, with additional testing service providers expected to join as onboarding continues.