Skip to main content

Get started with OpenID Federation

Use OpenID Federation to establish trust for any digital ecosystem, including Open Data, wallets, Agentic AI access, and more. Raidiam Connect enables you to:

  • Create the simplest federations with a single Trust Anchor

  • Create a federation of federations, where there are multiple Trust Anchors, either internal only or including external ones

  • Use a Raidiam Connect Trust Anchor as an intermediate Trust Anchor in an existing external federation

Request sandbox access

Request sandbox access to create an OpenID Federation with Raidiam Connect.

Create an OpenID Federation Trust Anchor

  1. Log in to the platform and select Reference Data > Federations > New Federation.

  2. Complete the details for the federation you are creating:


FieldRequiredDescription
Federation NameYesName of the federation
DescriptionNoA detailed description of the federation including its scope, purpose, and more
Organization NameYesName of the organization administering the federation
ContactsNoList of the contacts interested parties can get in touch with
Logo URIYesLogo of the federation (or administering organization)
Policy URINoURI pointing to the document describing terms and conditions or policies relevant to the Federation
Homepage URIYesURI pointing to the federation's homepage
Remote Trust AnchorNoURI of a remote, superior Trust Anchor in relation to this federation

This URI is added to the authority_hints within this federation's self-issued Entity Statement.
  1. Save the federation.

As a result, your federation is created. You can see all endpoints related to your Trust Anchor.

Add domains and roles

  1. Create a domain and associate it with the federation you created.

    Domains control which roles are available for organizations and their technical resources within the federation.

  2. Add roles and their metadata within the domain you created.

    Federation-type roles define how an organization's client application or RP metadata, and authorization server or OP metadata, are presented to the broader ecosystem.

Add intermediate Trust Anchors (optional)

If you are creating a federation of federations, you can add intermediate Trust Anchors in two ways:

  • You can create another federation within Reference Data and reference your superior Trust Anchor within the Remote Trust Anchor URI field during intermediate creation.

  • You can onboard an organization as an Authority, making it an Intermediate Trust Anchor at the same time. Remember to map the authority to a domain.

In both cases, delegate intermediate Trust Anchor (or intermediate sub-federation) administration to the respective administrators, enabling them to govern the organizations and their resources that fall under the intermediate Trust Anchor.

Onboard organizations

  1. Add Organizations to participate in the federation.

  2. Assign the domain associated with the federation to the onboarded organizations.

  3. Assign roles to organizations.

  4. Delegate organization Administration, enabling organization administrators to register their technical resources like applications or servers.


tip

Once an organization administrator registers a client application and assigns a federation-type role to this client, it receives a unique entity identifier and is treated as a federation participant. This means it is listed in the federation's /list endpoint. Authorization servers can then use your federation's /fetch endpoint to get signed Entity Configurations for that client, or use the federation's /resolve endpoint to resolve the full Trust Chain.


If the organization administrator registers an authorization server/OP, it is added automatically to the federation (available in the /list endpoint) based on the organization's domain assignment, unless it is explicitly set not to participate in the ecosystem or federation during server creation.