IDfurther

IDfurther is a governance-driven framework and platform for federated identity and attribute data exchange intended to enable interoperable authentication and authorization across organizational boundaries. It seeks to unify identity proofing, consent management, and privacy-preserving data sharing within a common protocol stack.

The specification envisions three core layers: a verifiable identity layer for claims, an attribute exchange layer for sharing attributes, and a policy and consent layer to govern access and retention. It emphasizes privacy by design, user consent, and cryptographic proofs to minimize data exposure.

Key components include an Identity Hub for secure storage and portability of identity wallets, Verifiers to validate proofs, and Policy Engines to enforce access rules. Communications rely on standard web protocols and a set of profiles to support different use cases such as onboarding, access control, and cross-organization collaboration.

History and governance: Originating from a cross-industry initiative in the early 2020s, IDfurther is stewarded by the IDfurther Foundation, with working groups for technical spec, governance, and ethics. While still evolving, several pilots have demonstrated cross-border onboarding, credential portability, and consent-driven data sharing.

Reception and critique: Proponents credit IDfurther for reducing password fatigue and enabling frictionless yet secure sharing. Critics point to complexity, reliance on a governance body, and potential interoperability gaps during transition from legacy systems. Adoption remains uneven across sectors.

See also: Verifiable credentials, OAuth 2.0, SAML, Decentralized identifiers, Privacy by design.