Internet Identity Workshop IIWXLIII #43 2026B

The Internet Identity Workshop #IIW has been finding, probing and solving identity issues twice every year since 2005. Internet Identity Workshop XLIII November 3 - 5, 2026 | at the Computer History Museum! We hope that you will join us at the 42nd IIW this Spring! You’ll acquire the real-time pulse of genuinely disruptive technologies that are the foundation of today's important Internet movements. Every IIW moves topics, code, and projects downfield. Name an identity topic and it's likely that more substantial discussion and work has been done at IIW than any other conference! IIW is at its heart a participatory conference. It is an Open Space unConference. With no keynotes or panels, IIW is about getting stuff done! All attendees are welcome to call, host, or present sessions. No formal presentation is required. Check out the links below for more information about IIW: • Watch the Video 'What Is IIW' • Check out Proceedings from previous IIW's We're looking forward to being together in person at the Computer History Museum this Spring! Our barista Rick will be there along with the traditional Burrito Bar on Wednesday and, of course, you can toast your own bagels or grab a Krispy Kreme. Your ticket to IIW includes continental breakfast and lunch each day along with drinks and dinner Tuesday and Wednesday. Opening Circle at the Computer History Museum Why You Should Participate This is the time and place that you get to discuss, share your knowledge, work on and learn about anything & everything related to Internet Identity TODAY. Identity is at the heart of all the topics listed below, along with others we hope to see discussed at IIW in November 2026: Authentication & Authorization Protocols OAuth, OpenID Connect, FIDO and MFA, Authorization and Access Management, Multisignal Authentication, Authentication in the Enterprise/Extended Enterprise, Authentication of US Government Employees, Identity in the Context of Mobile Device Management, Identity and IoT Verifiable Credentials, DIDs & Credential Standards Self-Sovereign (SSI) and Decentralized Identity (DID), Verifiable Credentials and DIDs, OpenID4VC, Credential Exchange over Self-Issued OpenID, Credential Ecosystems, Cryptographic Credentials, OpenID4VC updates and server-to-server issuance, KERI and did:webs in production, DIDcomm in real deployments, AT Protocol's IETF working group, C2PA and content authenticity intersecting with identity, Formal security verification of identity specifications Trust Infrastructure & Governance Trust as a social/institutional arrangement (not just a protocol feature), Building institutions vs. building tools, Decentralized Trust Graph, Federated trust registries and their governance models, Trusted issuer registries: ToIP, TRAIN, EBSI — what's converging, Who governs the evaluator? (trust-of-the-trust-registry problem), First Person Project Post-Quantum Cryptography Dilithium and other PQC implementations, Cryptographic agility, Migration paths for existing DID/VC infrastructure, Quantum-readiness for credentials issued today that live for decades EUDI Wallet: Pilot to Production Country-by-country implementation status, Cross-border interoperability, Wallet-level authentication and authorization, Digital Credentials API on iOS/Android, Certification and conformance testing, EU Business Wallet (commercial models, vLEI, sector applications), Reconciling the decentralized vision with centralized national rollouts Agentic Identity Authn and Authz for AI Agents, Agent taxonomy, Delegated authority and downstream proof, Attenuating authorization across delegation hops, Sub-agent OAuth flows and nested delegation, Agents acting for people without becoming a new intermediary, Open protocols for agent cryptographic identity without pre-registration, Proof of Human Delegation, Agent authentication for payments/tokenized value, Fine-grained authorization for AI agents (AuthZEN/MCP profile), Execution-time delegation and intent alignment, Anchoring agent identities to verifiable humans, What "accountability" means when the actor is an agent Identity Assurance, Proofing & Risk Identity Proofing, Identity Fraud, Biometrics, Identity Verification for Internet Payments Privacy & Selective Disclosure Privacy in the Age of Surveillance, ZKPs, Age verification, Selective disclosure methods, Protecting vulnerable contributors when impact records are public by design, The privacy paradox (public verifiability vs. personal safety) Personal Autonomy, VRM & Relationship Economics Personal AI, Personal Sovereignty, VRM, Data Liberation and Portability, Earned (rather than coerced) Customer Loyalty ~ CRM Sector Applications & Global Context Identity and Privacy in Healthcare, Patient-owned health data — the wallet model, International Perspectives, Identity and geopolitics — credentials across hostile borders Adjacent Hard Problems Death and digital estate planning, Cognitive liberty and First Amendment implications, Indigenous data sovereignty (OCAP) as a design authority, Content authenticity + proof of human authorship in an AI-saturated web Deployment & Governance Reality Real adoption barriers, Making digital identity simpler for citizens/orgs/relying parties, Migration paths out of corporate/platform identity (Google/Apple sign-in), What governance forms fit the infrastructure we've built? Community & Reach Geographic representation — Africa, LATAM, APAC, Bridging IIW with DICE, DID:UNCONF Africa, etc., Bioregional and community-controlled identity infrastructure, Regenerative accelerationism Looking Backward / Looking Forward SSI at 10 — what did we get right, wrong, The race condition — democratizing tech vs. authoritarian alternatives, What does the next 10 years of identity look like? SEDI, Duty of Loyalty & First-Party Terms (MyTerms/IEEE 7012) State-endorsed digital identity as fiduciary relationship, Making duty of loyalty operationally enforceable, Auditability — proving a relying party honored the obligation, Legal frameworks vs. technical primitives, Shift from data protection to relationship governance, Individuals proposing terms vs. adhesion contracts, Machine-readable terms as the relationship boundary, MyTerms as SEDI's operational layer, Real-world 7012 deployment and friction points, Records of agreement See the growing list of topics put forth by those who have already registered for IIWXLIII HERE! "I've been attending IIW for many years, and it provides immense value every time. The event promotes progress in one of the most exciting and consequential realms anywhere in the world of technology, and the unConference format brings out the best in experienced identity practitioners and newbies alike." Eve Maler - Digital identity futurist and strategist | Co-inventor of XML, SAML, and UMA How It Works The agenda will be created live each day by attendees present at the Opening Circle. The doors will open at 8:00 with espresso and light breakfast and Agenda Creation happens at 9:00 followed by five (5) working sessions. For a visual idea of how this works, take a look at this Video Montage of IIW #15 created by TechGoddessJudith. Through dozens of sessions, lunches & two evening meals (Provided by our Generous Sponsors) you'll have plenty of chances to exchange ideas and make new professional connections. The Open Space unConference format is perfect for a rapidly moving field where the organizing team cannot predetermine what needs to be discussed. We do know great people who will be at IIW XLII. The attendees and their passion for learning and contributing to the event make it the success that it is. This is the time and place that you get to discuss, share your knowledge, work on and learn about anything & everything related to Internet Identity today. "From my perspective, IIW is the seminal conference for the digital identity space.