Internet Identity Workshop (IIW)
- Next edition
- Apr 27 to 29, 2027
- Where
- Computer History Museum, Mountain View, CA, USA
- Usually
- Twice a year: late April and October or November
- Format
- In-Person
- Organizer
- Internet Identity Workshop
- Attendance
- About 300 (287 at IIW XLI, October 2025)
Editions
- Oct 19 to 21, 2027 · Computer History Museum, Mountain View, CA, USA
- Apr 27 to 29, 2027 · Computer History Museum, Mountain View, CA, USA
- Nov 3 to 5, 2026 · Computer History Museum, Mountain View, CA, USA · concluded
- Apr 28 to 30, 2026 · Computer History Museum, Mountain View, CA, USA · concluded
What this conference is for
The Internet Identity Workshop (IIW) is small, twice a year, and disproportionately important. Held at the Computer History Museum in Mountain View, it is an unconference: there is no fixed agenda, attendees propose sessions on the morning of each day, and the result is where a remarkable amount of identity's foundational work gets debated and advanced. Much of the thinking behind OAuth, OpenID Connect, and the entire verifiable credentials and decentralized identity movement was shaped in these rooms.
Who should attend
Standards contributors, protocol designers, and practitioners working on the frontier (decentralized identity, wallets, agentic identity). If you want to influence where identity is going, not just learn where it is, IIW is the room.
When and where
IIW has run twice a year since 2005 at the Computer History Museum. IIW XLI in October 2025 drew 287 participants. The fall 2026 edition, IIW XLIII, runs November 3 to 5, with VRM Day and MiniKeriConf on November 2 and an Agentic Internet Workshop on November 6 at the same venue. IIW also lends its format to regional events such as DICE in Europe.
What to expect
A participant-driven, notes-heavy format. Come ready to contribute. The published session notes are a valuable public record of the field's open questions.
Coverage
We cover IIW in full, focusing on the standards and decentralized-identity threads that shape the rest of the industry.
Related on Start with Identity
- PodcastA Digital Identity Digest
Short weekly episodes from standards veteran Heather Flanagan that "translate geek to human" on identity standards, wallets, and the web platform.
- Blog1 of 123 AI agent identity drafts at the IETF has been adopted, and 7 of 11 agent problems already have a standard
SWI's Agent Identity Standards Map 2026 dates the status of 70 specifications for AI agent authentication, delegation and authorization. Most of the problem is
- BlogA loose PHP comparison let attackers sign in as WordPress admin through SAML
Two unauthenticated bypasses in the miniOrange SAML 2.0 Single Sign On plugin, CVE-2026-61979 and CVE-2026-15981, treat OpenSSL's error return as a valid signat
- BlogAgent identity just got a protocol, which is the easy half
Okta shipped Agent SSO and got Cross App Access adopted into MCP the same month a GitHub issue was shown to reach CI secrets in Claude Code and Gemini CLI. The
- GlossaryAgent Registry
An agent registry is an inventory of the AI agents an organization runs or allows, recording for each one its identity, accountable human owner, purpose, permis
- PodcastAuth0
The late Vittorio Bertocci's interviews with the authors of OAuth, OpenID Connect, FIDO, and SAML. Ended in 2022, and still the best audio archive on identity s