The speaker’s profile picture
Brian Campbell

As a Distinguished Engineer for Ping Identity, Brian aspires to one day know what a Distinguished Engineer actually does for a living. In the meantime, he's tried to make himself useful with little things like designing and building much of PingFederate, the product that put Ping Identity on the map. When not making himself useful, he tries to build his legacy by sneaking his name onto technical documents that few people will ever actually read, including some identity and security standards in the IETF and OpenID Foundation. He holds a B.A., magna cum laude, in Computer Science from Amherst College in Massachusetts. Despite spending four years in the state, he has to look up how to spell "Massachusetts" every time he writes it.

  • IAM for AI: From "Eh, I?" to "I am."
  • AI Agent Authentication and Authorization
The speaker’s profile picture
Christian Bormann

Christian Bormann is an architect for digital identity and cryptography, currently working for the german EU Digital Identity Wallet project. With an MSc in Computer Science from RWTH Aachen focused on Distributed Systems, his career has centered on digital innovation in IoT and distributed systems, particularly digital identity and privacy-enhancing technologies. He is actively involved in international standardization efforts to enable secure and interoperable digital wallets.

  • DPoP - Lessons learned and improvement proposals
The speaker’s profile picture
Christopher Meier

Chris is a Software Engineer at Ubique. Most of his time is spent on digital identity, security and mobile development, where he contributes to secure and seamless solutions that enhance user experience across a variety of digital products. Before entering the OAuth and OpenId rabbit hole, he has tinkered with Hyperledger Indy, RDMA and TEEs. Chris holds a Msc in Computer Science from ETH Zurich.

  • SD-JWT: From Selective Disclosure to Zero Knowledge
The speaker’s profile picture
Dag Sneeggen
  • Scaling Workload Identity Lifecycle Management with Standards
The speaker’s profile picture
Dmitry Telegin

Dmitry is a principal engineer at Backbase UK. He is a Keycloak contributor, expert and consultant, and also a founder of Carretti Consulting.

  • Human and Workload Identities: Bridging the Gap with Transaction Tokens
The speaker’s profile picture
Elias Botterli Sørensen

I have been working closely with OAuth 2.0, OpenID connect and other IAM-related specifications since 2018. Last year I also started diving into the verifiable credentials specifications that are relevant in the eIDAS 2.0 & EUDI standards that will be launched in Europe in the next few years. I am passionate about the complexities and values involved with digital identity technologies and feel very excited for what is coming.

  • Experience report from implementing OpenID4VC issuance and presentation specifications in Norway
The speaker’s profile picture
Gareth Oliver
  • Delegate SD-JWTs
The speaker’s profile picture
Jonas Primbs

Jonas Primbs, M.Sc., is an IT security researcher at the University of Tübingen, Germany, since 2020. While completing his PhD, he is working at the penetration testing company SySS GmbH as an IT security consultant since 2023. With his broad expertise in web application security and modern authentication and authorization standards, he aims to ensure end-to-end security across users and services based on open standards.

  • Browser Swapping – How to Hack & How to Fix?
The speaker’s profile picture
Kaixuan Luo

Kaixuan Luo is a PhD candidate at Mobile Technologies Centre (MobiTeC), the Chinese University of Hong Kong (CUHK). His research focuses on web security and its intersection with digital identities. He is a three-time Black Hat USA speaker and has published his research at USENIX Security and IEEE S&P.

  • Understanding OAuth Session Fixation in Connector Ecosystems
The speaker’s profile picture
Kushal Das

Kushal Das is a public interest technologist working at Sunet (https://sunet.se) where he helps to build secure and privacy focused tools and services. He is CPython core developer & fellow at the Python Software Foundation. He is also part of the core team of the Tor Project, and a long time contributor to Fedora Project. He also helps out citizens/journalists/activists with digital security trainings. He regularly blogs at https://kushaldas.in.

  • Inmor: a new openid-federation trust anchor
The speaker’s profile picture
Michael B. Jones

Dr. Michael B. Jones
Building the Internet's Missing Identity Layer
Self-Issued Consulting

Michael B. Jones is on a quest to build the Internet's missing identity layer. He is an editor of the OpenID Connect specifications, IETF OAuth specifications, including JSON Web Token (JWT) and DPoP, the IETF JSON Object Signing and Encryption (JOSE) specifications, FIDO 2.0, and W3C Web Authentication. In the Digital Credentials space, he is an editor of the W3C Verifiable Credentials specs, the JSON Web Proofs (JWP) specs, and a contributor to the OpenID4VC specs. He co-chairs the IETF COSE working group, which is doing post-quantum algorithms work for COSE and JOSE. Michael was recognized as a Distinguished Engineer by the OpenID Foundation and was granted a lifetime achievement award by Kuppinger Cole for creating simple, secure, ubiquitous, interoperable digital identity solutions since 2005. As a long-time member of the OpenID Board of Directors, he architected the award-winning and globally adopted OpenID Certification program. Michael's Ph.D. in Computer Science from Carnegie Mellon University led to a lifelong career in digital identity, computer security, privacy, and networking. He is passionate about mentoring the next generation of identity leaders. His professional Web site is https://self-issued.consulting/ and he blogs at https://self-issued.info/.

  • Progress Report on Handling an Actionable Security Vulnerability
The speaker’s profile picture
Mirko Mollik
  • Integrating the OIDF conformance suite into CI, what can go wrong
  • From Draft to Deployment: Building a Production Ecosystem on Moving Standards
The speaker’s profile picture
Patrick Amrein

Patrick started his career as a mobile developer very early on, with a game for a Sony Ericson using Java2ME. He switched technologies a few times - Android, iOS, Windows Phone (the best platform ever!) - and decided to study physics. Thanks to a few courses in algebra (among other math courses) - and thanks to the work of some great researchers - he came up with a proposal for device binding of BBS signatures with ECDSA (zk-bridge). He is currently working on a variety of projects on cryptographic protocols. Patrick holds an MSc in Physics from ETH Zurich.

  • SD-JWT: From Selective Disclosure to Zero Knowledge
The speaker’s profile picture
Paul Bastian
  • DPoP - Lessons learned and improvement proposals
The speaker’s profile picture
Pedram Hosseyni
  • Attacks and Security Proofs for Authentication and Authorization Protocols
The speaker’s profile picture
Pieter Kasselman

Pieter Kasselman is an Identity Enthusiast, focused on standards based identity products. Pieter has over 25 years' experience as a technologist and engineer, working on bringing new technologies and business models to market. Pieter's first encounter with identity was his final year project which used neural networks to identify users based on typing patterns. Since then he worked in a number of roles as an information security analyst, software engineer and program manager in industries that include finance, software, silicon and cloud. His diverse background gives him a unique perspective of the importance of identity and the role of identity standards as both a business enabler and the first line of defence for.

  • Human and Workload Identities: Bridging the Gap with Transaction Tokens
  • AI Agent Authentication and Authorization
  • Scaling Workload Identity Lifecycle Management with Standards
The speaker’s profile picture
Takashi Norimatsu

Takashi Norimatsu, Ph.D. in Engineering, Senior OSS Specialist, Hitachi, Ltd. is a maintainer of Keycloak, IAM OSS, CNCF incubating project. He has been implemented and contributed to Keycloak security features like FAPI 1.0/FAPI 2.0/FAPI-CIBA security profiles, Model Context Protocol (MCP) authorization part, WebAuthn/Passkeys support. He leads Keycloak's community "OAuth SIG" (Ex FAPI-SIG) for supporting OAuth/OIDC and its related security features to Keycloak.

  • Introducing Elicitation Concept of MCP for Secure Cross-domain Multi-hop API Calls in OAuth World
The speaker’s profile picture
Xenia Bogomolec

Xenia is the founder of Quant-X Security & Coding, a boutique company based in Hanover, Germany, that specializes in cyber security consulting for highly regulated organizations. She is the lead of the R&D consortium Quant-ID. Due to her background in mathematics, she is involved in quantum and post-quantum security research and technology transfer since 2016. Xenia's special skill is connecting experts from various tech, compliance an management backgrounds and thus driving innovation in complex infrastructures.

  • Outcomes from the Quant-ID Project - PQC and QRNG in the Scope of OAuth and OIDC
The speaker’s profile picture
Yaroslav Rosomakho

Yaroslav Rosomakho is Chief Scientist at Zscaler, where he leads research and strategy across emerging technologies, secure networking, and cryptographic protocols. He is an active contributor to the IETF, member of the Internet Architecture board and chair of SEAT and HPKE working groups. In addition to that he contributes to TLS, QUIC, HTTP, WIMSE and MASQUE. Yaroslav has a background in building large-scale security systems and has held leadership roles at Netskope and Arbor Networks. He is passionate about bridging deep technical insight with practical deployment strategies.

  • AI Agent Authentication and Authorization