Skip to main content

Certifications

SecureAuth takes part in the OpenID Foundation FAPI working groups and implements the Open Banking specifications that have been finalized. Where a specification is still evolving, SecureAuth implements the current draft.

This page lists OpenID Foundation certifications in two groups: those held under the SecureAuth name, and those earned before SecureAuth acquired Cloudentity, which appear in the OpenID Foundation directories under the Cloudentity name.

Current SecureAuth certifications​

The SecureAuth SaaS platform is certified against the final FAPI 2.0 Security Profile and the final FAPI 2.0 Message Signing specifications. Both certifications are dated 23 July 2026 and appear under SecureAuth, implementation "SaaS as of July 2026".

FAPI 2.0 Security Profile​

SecureAuth is certified against the FAPI 2.0 Security Profile final specification.

OpenID Provider conformance profiles

  • FAPI2SP OP MTLS + MTLS (23 July 2026)

  • FAPI2SP OP MTLS + DPoP (23 July 2026)

  • FAPI2SP OP private key + MTLS (23 July 2026)

  • FAPI2SP OP private key + DPoP (23 July 2026)

  • FAPI2SP OP OpenID Connect (23 July 2026)

FAPI 2.0 Message Signing​

SecureAuth is certified against the FAPI 2.0 Message Signing final specification.

OpenID Provider conformance profiles

  • FAPI2MS OP JAR (23 July 2026)

  • FAPI2MS OP JARM (23 July 2026)

Pre-acquisition certifications​

SecureAuth acquired Cloudentity. The certifications in this section were earned before the acquisition and are recorded in the OpenID Foundation directories under the Cloudentity name, with the implementer and date shown for each entry.

These records document Cloudentity self-certifications for the identified deployments and dates shown. They are not SecureAuth self-certifications and do not establish the current certification or support status of SecureAuth SaaS.

OpenID provider profiles​

Certified by Cloudentity, Inc. under the implementation "Cloudentity as of August, 2022".

OpenID Provider conformance profiles

  • Basic OP (19 August 2022)

  • Implicit OP (19 August 2022)

  • Hybrid OP (19 August 2022)

  • Config OP (19 August 2022)

  • Dynamic OP (19 August 2022)

  • Form Post OP (19 August 2022)

FAPI 1.0 Advanced Final​

Certified by Cloudentity, Inc. under the implementation "Cloudentity as of August, 2022".

OpenID Provider conformance profiles

  • FAPI Adv. OP w/ MTLS (19 August 2022)

  • FAPI Adv. OP w/ Private Key (19 August 2022)

  • FAPI Adv. OP w/ MTLS, JARM (19 August 2022)

  • FAPI Adv. OP w/ Private Key, JARM (19 August 2022)

  • FAPI Adv. OP w/ MTLS, PAR (10 October 2022)

  • FAPI Adv. OP w/ Private Key, PAR (10 October 2022)

  • FAPI Adv. OP w/ MTLS, PAR, JARM (10 October 2022)

  • FAPI Adv. OP w/ Private Key, PAR, JARM (10 October 2022)

UK Open Banking (based on FAPI 1.0 Advanced Final)​

Certified by Cloudentity, Inc. under the implementation "Cloudentity as of August, 2022".

OpenID Provider conformance profiles

  • UK-OB Adv. OP w/ MTLS (19 August 2022)

  • UK-OB Adv. OP w/ Private Key (19 August 2022)

Australia CDR (based on FAPI 1.0 Advanced Final)​

Certified by Cloudentity, Inc. under the implementation "Cloudentity as of August, 2022".

OpenID Provider conformance profiles

  • AU-CDR Adv. OP w/ Private Key (19 August 2022)

  • AU-CDR Adv. OP w/ Private Key, PAR (10 October 2022)

Brazil Open Banking (based on FAPI 1.0 Advanced Final)​

Certified by Cloudentity, Inc. under the implementation "Cloudentity as of August, 2022".

OpenID Provider conformance profiles

  • BR-OB Adv. OP w/ Private Key (19 August 2022)

  • BR-OB Adv. OP w/ Private Key, JARM (19 August 2022)

  • BR-OB Adv. OP DCR (19 August 2022)

  • BR-OB Adv. OP w/ MTLS (23 September 2022)

  • BR-OB Adv. OP w/ MTLS, PAR (23 September 2022)

  • BR-OB Adv. OP w/ MTLS, JARM (23 September 2022)

  • BR-OB Adv. OP w/ MTLS, PAR, JARM (23 September 2022)

  • BR-OB Adv. OP w/ Private Key, PAR (10 October 2022)

  • BR-OB Adv. OP w/ Private Key, PAR, JARM (10 October 2022)

Brazil Open Insurance (based on FAPI 1.0 Advanced Final)​

Certified by Cloudentity under the implementation "Cloudentity as of January 2023".

OpenID Provider conformance profiles

  • BR-OPIN Adv. OP w/ MTLS (20 December 2022)

  • BR-OPIN Adv. OP w/ Private Key (20 December 2022)

  • BR-OPIN Adv. OP w/ MTLS, PAR (20 December 2022)

  • BR-OPIN Adv. OP w/ Private Key, PAR (20 December 2022)

  • BR-OPIN Adv. OP w/ MTLS, JARM (20 December 2022)

  • BR-OPIN Adv. OP w/ Private Key, JARM (20 December 2022)

  • BR-OPIN Adv. OP w/ MTLS, PAR, JARM (20 December 2022)

  • BR-OPIN Adv. OP w/ Private Key, PAR, JARM (20 December 2022)

  • BR-OPIN Adv. OP DCR (2 January 2023)

KSA Open Banking (based on FAPI 1.0 Advanced Final)​

Certified by Cloudentity under the implementation "Cloudentity as of May 2023".

OpenID Provider conformance profiles

  • KSA-OB Adv. OP w/ MTLS, PAR (1 May 2023)

  • KSA-OB Adv. OP w/ Private Key, PAR (1 May 2023)

Client Initiated Backchannel Authentication profile (CIBA)​

Certified by Cloudentity, Inc. under the implementation "Cloudentity as of August, 2022".

OpenID Provider conformance profiles

  • FAPI-CIBA OP Poll w/ MTLS (19 August 2022)

  • FAPI-CIBA OP Poll w/ Private Key (19 August 2022)

  • FAPI-CIBA OP Ping w/ MTLS (19 August 2022)

  • FAPI-CIBA OP Ping w/ Private Key (19 August 2022)

Australia ConnectID (FAPI 2.0 ConnectID Third Implementer's Draft)​

Certified by Cloudentity under the implementation "Cloudentity as of May 2023". This certification is against the FAPI 2.0 ConnectID Third Implementer's Draft, not the final ConnectID profile.

OpenID Provider conformance profiles

  • FAPI2MS with ConnectID support (6 May 2023)

Financial Data Exchange​

Financial Data Exchange - 5.2

The FDX API standardizes how financial data is shared, covering consent, user control, and consumer dashboards. It aligns with other global standards, including the OpenID Foundation's Financial-grade API (FAPI) security standard and the insurance industry's ACORD annuity standards. No certification suite is available yet.

SecureAuth supports the FDX 5.2 security profile, including user consent, in its SaaS deployment.