Ecosystem

Implementations

Products that transmit or receive shared signals, open-source libraries for building your own, and test services to develop against — including every implementation demonstrated at an OpenID Foundation interop event.

Products

Name	Role	Profiles	Interop	Notes
AppOmni	Transmitter push	SSFCAEP	TX ’24	SaaS security; push Transmitter in OIDF interop results. No public SSF documentation found yet; link goes to the interop results.
Cisco (Duo) Cisco	Transmitter + Receiver push	SSFCAEP	LON ’24 TX ’24	Cisco demonstrated push Transmitter and Receiver interop (SGNL's write-up names Cisco Duo). Cisco also runs sharedsignals.guide, a developer guide to SSF. More
Delinea	Transmitter + Receiver push + poll	SSFCAEP	TX ’24	Privileged access; Transmitter and Receiver in OIDF interop results. No public SSF documentation found yet; link goes to the interop results.
Cross-Account Protection (RISC) Google	Transmitter	RISC		Google sends RISC security events about Google Accounts to apps that use Sign in with Google.
Google Workspace Shared Signals (closed beta) Google	Transmitter + Receiver push + poll	SSFCAEP	TX ’24 LON ’25 AUTH ’25	SSF integration for Google Workspace. Interop results: Receiver by poll (Dec 2024), Transmitter by push against the final specs (Oct 2025).
Helisoft	Transmitter	SSFCAEP	LON ’24	Transmitted CAEP events to SGNL at the first interop event. No public SSF documentation found yet; link goes to SGNL's write-up.
Verify Antenna IBM	Transmitter + Receiver push + poll	SSFCAEP	TX ’24 LON ’25 AUTH ’25	A lightweight, self-hosted container for IBM Verify that exchanges security events and risk signals using SSF.
Jamf Security Cloud Jamf	Transmitter push	SSFCAEP	TX ’24 AUTH ’25	Transmits device-compliance-change and risk events for managed Apple devices; documented integrations with Okta and SailPoint.
Identity Threat Protection Okta	Transmitter + Receiver push	SSFCAEPRISC	LON ’24 TX ’24 LON ’25 AUTH ’25	Receives CAEP and RISC signals from security vendors and feeds them into entity risk policy (session revocation, Universal Logout, Workflows); transmits session-revoked and credential-change. More
Omnissa	Transmitter push	SSFCAEP	TX ’24 LON ’25 AUTH ’25	Push Transmitter in OIDF interop results. No public SSF documentation found yet; link goes to the interop results.
Identity Security Cloud SailPoint	Transmitter + Receiver push + poll	SSFCAEP	LON ’24 TX ’24 LON ’25 AUTH ’25	Receives session-revoked, credential-change, token-claims-change, device-compliance-change and risk-level-change events and acts on them with Workflows; transmits session-revoked when an identity's lifecycle state changes.
Saviynt	Receiver poll	SSFCAEP	TX ’24	Identity governance; poll Receiver in OIDF interop results. No public SSF documentation found yet; link goes to the interop results.
CAEP Hub SGNL	Transmitter + Receiver push	SSFCAEP	LON ’24 TX ’24 LON ’25 AUTH ’25	SGNL's access-management platform as both SSF Transmitter and Receiver; ingests CAEP events as a real-time system of record for access decisions.
Thales	Receiver push	SSFCAEP	TX ’24 LON ’25	Push Receiver in OIDF interop results. No public SSF product documentation found yet; link goes to the interop results.
VeriClouds	Transmitter	SSFRISC	LON ’24	Compromised-credential intelligence; has demonstrated an SSF Transmitter for the RISC credential-compromise event. VeriClouds contributed to the RISC specification.
WinMagic	Transmitter + Receiver	SSFCAEP	TX ’24	Endpoint authentication; Transmitter (push and poll) and push Receiver in OIDF interop results. No public SSF documentation found yet; link goes to the interop results.

Test services

Name	Role	Profiles	Interop	Notes
caep.dev SGNL	Transmitter + Receiver push + poll	SSFCAEP	TX ’24 AUTH ’25	Public test Transmitter and Receiver for trying CAEP events against your own implementation. More

Libraries

Name	Role	Profiles	Notes
SSF Receiver for Go Open source Go	Receiver push + poll	SSFCAEP	A Go Shared Signals Receiver supporting push and poll delivery, stream status, and typed CAEP events.
secevent SGNL Go	Transmitter + Receiver	SSFCAEPRISC	Build, sign, parse and validate Security Event Tokens (RFC 8417).
ssfreceiver SGNL Go	Receiver	SSF	Library for building SSF Receivers: discovery, stream management and event handling.

OpenID Foundation interop events

The Shared Signals Working Group runs live interoperability sessions where implementers connect their Transmitters and Receivers to each other in front of an audience. Participants must first pass the OpenID conformance tests. Roles and push/poll columns above come from the published results; where no table was published, roles come from the vendor's own documentation.

Event	Notes
Gartner IAM London, Mar 2024	The first CAEP interop event.
Gartner IAM Grapevine TX, Dec 2024	SSF, CAEP, RISC and SCIM Events; 14 implementations, with published push/poll results.
Gartner IAM London, Mar 2025	OIDF published no participant list; participants are compiled from Okta’s write-up and participant confirmations, and may be partial.
Authenticate 2025, Carlsbad CA, Oct 2025	The first interop against the final SSF 1.0 and CAEP 1.0 specifications; 8 implementations.

Add your implementation

An entry needs public evidence that it speaks SSF, CAEP or RISC — product documentation, source code, or an OpenID interop result. To add or correct one, open a pull request against implementations.json. Vendors listed here only through an interop result: a link to your SSF documentation is especially welcome.