Search results

Discovery of Token Validation Metadata and Protocol Binding

Status: Open.

#810 In w3c-fedid/FedCM;

· oroka750 opened on Feb 4, 2026

Use of apex domain is hard for organizations with different services owning different subdomains

Status: Open.

#809 In w3c-fedid/FedCM;

· will-bartlett opened on Feb 2, 2026

Allow IdPs to initiate a FedCM flow in top level redirects without requiring changes to Relying Parties

Status: Open.

#794 In w3c-fedid/FedCM;

· samuelgoto opened on Nov 10, 2025

Incremental authentication/authorization

Status: Open.

#793 In w3c-fedid/FedCM;

· stianst opened on Oct 28, 2025

Lock subframes to same identity as parent frames

Status: Open.

#782 In w3c-fedid/FedCM;

· will-bartlett opened on Sep 4, 2025

Say something about caching

Status: Open.

#781 In w3c-fedid/FedCM;

· will-bartlett opened on Sep 4, 2025

Make it clear image fetches in the spec are uncredentialed

Status: Open.

#779 In w3c-fedid/FedCM;

· npm1 opened on Aug 29, 2025

Lack of generic params on login_url is limiting, unclear privacy value

Status: Open.

#778 In w3c-fedid/FedCM;

· will-bartlett opened on Aug 29, 2025

Manifest fingerprinting wording describes mitigation imprecisely

Status: Open.

#777 In w3c-fedid/FedCM;

· will-bartlett opened on Aug 29, 2025

Manifest fingerprinting via subdomains and public suffix list

Status: Open.

#776 In w3c-fedid/FedCM;

· will-bartlett opened on Aug 29, 2025

Extension to FedCM API to allow SAML or OIDC frontchannel logout

Status: Open.

#773 In w3c-fedid/FedCM;

· huebnd opened on Aug 12, 2025

Specify the border between FedCM and protocols building on it

Status: Open.

#764 In w3c-fedid/FedCM;

· togamid opened on Jul 17, 2025