Start with Identity
96 profiles

Experts directory

Nominate someone

Identity is a field with unusually visible authorship. The protocols have named editors, the platforms have founders who wrote the first version themselves, and the profession has an association because a handful of people decided to build one. This directory is for those people: protocol and standards authors, founders who built an identity platform from scratch, the maintainers of the open-source identity software much of the internet runs on, the academics whose papers became standard practice, the researchers who break these systems in public so they get fixed, the policy people who write the rules and the national schemes, the practitioners who run all of it, community builders, and the architects whose framing the rest of the field still argues inside.

Specifications read differently once you know who wrote them and what problem they were solving, so each profile links the standards, platforms, and guides that person's work produced. Profiles are built from public information only and link to each person's own work. We do not speak for anyone listed here, and inclusion is not an endorsement in either direction. For practitioners talking about systems they run today, see the interviews; for the people who build this site, the contributors page. Someone missing, or something wrong? Tell us below.

Protocol & Standards Authors

25

The people who wrote the specifications identity actually runs on: OAuth, OpenID Connect, SAML, SCIM, WebAuthn, and the credential formats replacing them.

AP
Aaron Parecki
Director of Identity Standards · Okta
Maintainer of oauth.net and author of OAuth 2.0 Simplified
AB
Annabelle Backman
Co-chair, OpenID Shared Signals working group · AWS
Editor of RFC 8935 and RFC 8936, push and poll delivery for Security Event Tokens
AT
Atul Tulshibagwale
Inventor of CAEP, co-chair of the Shared Signals working group · CrowdStrike
Invented the Continuous Access Evaluation Protocol (CAEP) while at Google
BC
Brian Campbell
Distinguished Engineer · Ping Identity
Co-author of multiple OAuth working group RFCs
CA
Christopher Allen
Co-author of TLS 1.0 and the W3C DID specification · Blockchain Commons
Co-author of the IETF TLS 1.0 specification
DF
Daniel Fett
Editor, SD-JWT and SD-JWT VC · Authlete
Editor of the SD-JWT and SD-JWT VC specifications
DH
Dick Hardt
Editor, OAuth 2.0 (RFC 6749) · Hellō
Editor of RFC 6749, The OAuth 2.0 Authorization Framework
DR
Drummond Reed
Co-editor, W3C Decentralized Identifiers 1.0 · Gen Digital
Co-editor of the W3C Decentralized Identifiers (DID) 1.0 specification
EL
Emil Lundberg
WebAuthn specification editor and software engineer · Yubico
Editor of the W3C Web Authentication specification
EM
Eve Maler
Identity Architect and Standards Contributor · Venn Factory (Independent)
Co-inventor of XML (W3C)
HT
Hannes Tschofenig
IETF working group chair and RFC author · Siemens
Co-chaired the IETF OAuth working group
JB
John Bradley
Senior Standards Architect · Yubico
Co-author of WebAuthn and FIDO2 specifications
JR
Justin Richer
Independent Consultant · Bespoke Engineering
Co-author of 'OAuth 2 in Action' (Manning, 2017)
KY
Kristina Yasuda
Editor, OpenID for Verifiable Credentials · SPRIND
Editor of OpenID4VP and OpenID4VCI, the protocols for presenting and issuing digital credentials
MS
Manu Sporny
Founder and CEO, Digital Bazaar · Digital Bazaar
Co-creator of the W3C Verifiable Credentials and Decentralized Identifiers work
MJ
Mike Jones
Identity Standards Architect (former) · Self-Employed Consultant
Co-author and editor of OAuth 2.0 (RFC 6749) supporting documents
NS
Nat Sakimura
Chairman · OpenID Foundation
Co-author of OpenID Connect Core 1.0
PD
Pamela Dingle
Director of Identity Standards · Microsoft
OpenID Foundation board member
PH
Phil Hunt
Editor, SCIM Protocol (RFC 7644) · Independent Identity
Editor of RFC 7644, the SCIM protocol
SM
Samuel M. Smith
Inventor of KERI and author of the ACDC specification · ProSapien
Invented KERI, Key Event Receipt Infrastructure, a ledger-less approach to decentralized identifiers
SC
Scott Cantor
Technical editor, SAML 2.0; architect, Shibboleth · The Ohio State University / Shibboleth Consortium
Did most of the technical editing of the SAML 2.0 specifications at OASIS
TC
Tim Cappalli
Standards Architect · Okta
Editor of the W3C Web Authentication and Digital Credentials API specifications
TL
Tobias Looker
CTO, MATTR; editor of OpenID4VCI and BBS Signatures · MATTR
Editor of OpenID for Verifiable Credential Issuance
TL
Torsten Lodderstedt
Editor, OAuth 2.0 Security Best Current Practice · SPRIND
Editor of the OAuth 2.0 Security Best Current Practice and RFC 6819, the OAuth threat model
VB
Vittorio Bertocci
Identity Advocate (in memoriam) · Auth0 / Okta (former)
Long-running 'Identity, Unlocked' podcast

Founders & Builders

16

People who built an identity platform from nothing, and in several cases created the product category it now sits in.

AD
Andre Durand
Founder and CEO · Ping Identity
Founded Ping Identity in 2002
CS
Colin Sidoti
Co-founder and CEO, Clerk · Clerk
Co-founded Clerk in 2019 with Braden Sidoti
DG
Deepak Gupta
Founder, Start with Identity · GrackerAI
Founded the CIAM platform LoginRadius in 2013 and built it from scratch as board member, CTO, and CISO
EP
Eugenio Pace
Co-Founder, Auth0 (former) · Independent
Co-founded Auth0 in 2013
EK
Ev Kontsevoy
Co-founder and CEO, Teleport · Teleport
Co-founded Teleport, formerly Gravitational, in 2015
FK
Frederic Kerrest
Co-founder and Vice Chairman, Okta · Okta
Co-founded Okta in 2009 with Todd McKinnon
MM
Mark McClain
Co-founder and CEO, SailPoint · SailPoint
Founded Waveset Technologies in 2000, acquired by Sun Microsystems in 2003
MW
Matias Woloski
Co-Founder, Auth0 (former) · Independent
Co-founded Auth0 in 2013
MG
Michael Grinich
Founder and CEO, WorkOS · WorkOS
Founded WorkOS in 2018 after co-founding Nylas
RM
Reed McGinley-Stempel
Co-founder and CEO, Stytch · Stytch
Co-founded Stytch in 2020 with Julianna Lamb, both from Plaid
SR
Sagi Rodin
Co-founder and CEO, Frontegg · Frontegg
Co-founded Frontegg in 2019 with CTO Aviad Mizrachi
SE
Stina Ehrensvärd
Founder of Yubico, co-inventor of the YubiKey · Yubico
Founded Yubico in 2007 with Jakob Ehrensvärd and co-invented the YubiKey
TM
Todd McKinnon
Co-Founder and CEO · Okta
Co-founded Okta in 2009
TS
Travis Spencer
Founder, Curity · Curity
Founded Curity, an API-focused identity server used in regulated and open-banking deployments
UM
Udi Mokady
Founder, CyberArk · CyberArk (former)
Co-founded CyberArk in 1999 and created the privileged access management category
WC
Wayne Chang
Co-founder and CEO, SpruceID · SpruceID
Co-founded SpruceID, which builds open-source credentialing infrastructure

Open Source Builders

14

Maintainers and founders of the open-source identity software a large part of the internet runs on, from identity providers to the libraries underneath them.

AR
Aeneas Rekkas
Co-founder and CTO, Ory · Ory
Designed and implemented Ory Hydra, a certified open-source OAuth 2.0 and OIDC server
BO
Balázs Orbán
Creator of Auth.js, former lead maintainer of NextAuth.js · Independent
Lead maintainer of NextAuth.js, the most widely used authentication library for Next.js
BB
Bill Burke
Co-creator of Keycloak · Red Hat
Co-created Keycloak at Red Hat in 2014 with Stian Thorgersen
EG
Evan Gilman
SPIFFE and SPIRE maintainer, co-author of Zero Trust Networks · Independent
Maintainer of SPIRE, the reference implementation of SPIFFE
FS
Filip Skokan
Maintainer of openid-client, jose, and node-oidc-provider · Okta
Maintains openid-client, jose, and node-oidc-provider, certified OpenID Connect implementations
FF
Florian Forster
Co-founder and CEO, ZITADEL · ZITADEL
Co-founded ZITADEL in 2019 with a team from the Swiss public sector
JL
Jens Langhammer
Creator of authentik, CTO of Authentik Security · Authentik Security
Wrote the first commit of authentik in November 2018 as a personal project
MS
Mike Schwartz
Founder of Gluu, chair of the Janssen Project · Gluu
Founded Gluu in 2009 and built an enterprise IAM platform on open source
MM
Misagh Moayyed
Project lead and chairman, Apereo CAS · Apereo Foundation
Technical lead and chairman of Apereo CAS, in use across higher education worldwide
RP
Rishabh Poddar
Co-founder and CTO, SuperTokens · SuperTokens
Co-founded SuperTokens in 2019 with Advait Ruia
RH
Roland Hedberg
Author of pysaml2 and pyoidc · Umeå University (former)
Wrote pysaml2, the Python SAML 2.0 implementation shipped in many distributions
ST
Stian Thorgersen
Co-founder and Project Lead, Keycloak · Red Hat
Co-founded the Keycloak project at Red Hat in 2013 and leads it
TH
Tim Hinrichs
Co-creator of Open Policy Agent · Styra (former)
Co-created Open Policy Agent with Torin Sandall and Teemu Koponen
TS
Torin Sandall
Co-creator of Open Policy Agent · Styra (former)
Co-created Open Policy Agent and led its open-source engineering

Researchers & Educators

13

The academics whose papers became the practice: least privilege, role-based access control, the authentication protocol under Kerberos, and the usability research that ended password complexity rules.

MA
M. Angela Sasse
Professor of Human-Centred Security · Ruhr University Bochum and University College London
Co-authored Users Are Not the Enemy (1999) with Anne Adams
CN
Clifford Neuman
Principal designer of Kerberos · USC Information Sciences Institute
One of the principal designers of Kerberos versions 1 through 4 at MIT Project Athena
CH
Cormac Herley
Principal Researcher · Microsoft Research
Wrote So Long, And No Thanks for the Externalities (2009) on the rational rejection of security advice
DB
Dan Boneh
Professor of Computer Science, Stanford University · Stanford University
Co-author of BLS signatures, Short Signatures from the Weil Pairing
DF
David Ferraiolo
Co-author of the NIST RBAC model · NIST
Co-authored Role-Based Access Controls (1992) with Rick Kuhn
JS
Jerome Saltzer
Professor Emeritus, MIT · MIT (former)
Co-authored The Protection of Information in Computer Systems (1975) with Michael Schroeder
LS
Latanya Sweeney
Professor of the Practice of Government and Technology, Harvard · Harvard University
Developed k-anonymity with Pierangela Samarati
LF
Lorrie Faith Cranor
Director, CyLab; Professor, Carnegie Mellon University · Carnegie Mellon University
Directs CyLab and the CyLab Usable Privacy and Security Laboratory at CMU
MD
Michael D. Schroeder
Co-author of the Needham-Schroeder protocol · Xerox PARC and MIT (former)
Co-authored The Protection of Information in Computer Systems (1975) with Jerome Saltzer
RS
Ravi Sandhu
Professor Emeritus, University of Texas at San Antonio · UTSA Institute for Cyber Security
Author of the RBAC96 family of role-based access control models
RK
Rick Kuhn
Co-author of the NIST RBAC model · NIST
Co-authored Role-Based Access Controls (1992) with David Ferraiolo
RN
Roger Needham
Professor, University of Cambridge (1935 to 2003) · University of Cambridge (former)
Co-authored the Needham-Schroeder authentication protocol (1978)
RA
Ross Anderson
Professor of Security Engineering, University of Cambridge (1956 to 2024) · University of Cambridge (former)
Author of Security Engineering, the standard textbook, across three editions
From the people to the protocols

Learn what they built

The specs, the terms, and the implementation patterns these profiles point at.

Add to the directory

Nominate someone, or correct your own profile

This directory is built from public information, which means it is incomplete and will always be. If someone's work belongs here, tell us what they did and where it is documented. Self-nominations are fine: if you wrote a specification, maintain identity software, or published research the field uses, say so.

Corrections take the same route and go to the front of the queue. If you are listed here and want the entry changed, narrowed, or removed, we will do it. You can also email [email protected] directly with the same details if you prefer.

We publish checkable claims only, so a nomination without a source will come back to you with a request for one. Inclusion is not an endorsement, and nobody pays to be listed.