Global Standards and Policies for Digital Identity
Combined Session
Thursday, May 08, 2025 15:35—16:35
Location: A 05-06
Log in to download presentations
Thursday, May 08, 2025 15:35—16:35
Location: A 05-06
Watch the video
BNP Paribas Bank Polska together with Secfense will present how it successfully implemented passkeys for secure, passwordless authentication in its digital banking system for business clients. With growing phishing threats and increasing costs of password-based authentication, the bank needed a more secure and user-friendly solution without disrupting services used daily by thousands of corporate users.
This session will explain how the bank overcame the technical challenges of a complex identity and access management environment featuring multiple identity providers and authentication methods.
Attendees will learn how passwordless authentication can be deployed at scale in heavily regulated environments, and how the bank achieved a solution that was six times more cost-effective than traditional methods. If you’re exploring how to meet rising security demands while modernizing authentication, this is the session to attend.
Watch the video
Until recently, migrating credentials between providers was a complex and often insecure process, typically involving cumbersome CSV files. However, the FIDO Alliance is changing the landscape with the development of two critical industry standards: the Credential Exchange Format (CXF) and the Credential Exchange Protocol (CXP). These standards will enable seamless, secure migration of synced passkeys across all major providers.
In this session, we will explore the technical foundations of CXF and CXP, their implementation, and how they address current limitations while providing the flexibility to support future identity credentials.
Attendees will gain insight into the benefits these standards offer for both end-users and service providers, paving the way for a more secure, user-friendly digital identity ecosystem.
Watch the video
Part of the value of a Verifiable Credential is that the information is verified and tamper proof. However, what happens when the language and characters used in the VC is not supported or recognised by a Verifier in another language or jurisdiction?
This presentation will explore the following challenges:
- What happens when the issuing language/s and naming conventions need to be translated into English or other European languages?
- How do we deal with the fact that many Trust Anchors [banks] only collect a name in a national language and don’t have provisions for a western/European translation and vice versa?
- How can we be sure it is the same person when using the Credential outside of the issuing nation?
- What work is already underway in standards or working groups towards a unified technical approach and solution.
