caep

OpenID Shared Signals Working Group Repository

An open-source Go OpenID Shared Signals Framework Receiver.

OpenID Shared Signals (SSF/CAEP/RISC) and Security Event Tokens

MDM/UEM geofencing with an explainable risk engine. Local-first, open-source (Apache-2.0), no location exfiltration. Intune · Jamf · Applivery.

Quarkus Extensions supporting the Shared Signals Framework (SSF)

Standalone OpenID Shared Signals Framework transmitter for self-hosted Authentik deployments.

Zero Trust IAM — Zanzibar-style ReBAC authorization, passwordless auth (Passkey/DPoP), real-time risk analysis (Kafka Streams), CAEP continuous access evaluation

Go library implementing the OpenID Shared Signals Framework 1.0

HTTP transmission library for Security Event Tokens (SET) with CAEP/SSF support and zero dependencies

Forward SSF events from transmitters to other sinks

JavaScript/TypeScript library implementing RFC 8417 Security Event Tokens (SET) with CAEP and SSF support

Go library implementing the OpenID CAEP 1.0 event vocabulary — typed event payloads registered into go-secevent.

SGNL — independent third-party profile of a public API surface, by API Evangelist. SGNL is a continuous identity and authorization platform that eliminates standing privilege and makes real-time, context-aware access decisions for both human users and AI agents. It sits at the center of an enterprise IAM architecture, dynamically adapting permissio