Pamela Dingle
- OpenID Foundation board member
- Long-tenured identity standards advocate at Microsoft and previously Ping Identity
Bio
Pamela Dingle directs Microsoft's identity standards work and is a frequent voice on interoperability across IAM vendors. Prior to Microsoft she held identity roles at Ping Identity. Active on the OpenID Foundation board.
Profile built from public OpenID Foundation and Microsoft records. Vendor affiliation disclosed.
Where their work shows up
Dingle's standards and interoperability work sits behind Microsoft Entra's support for OpenID Connect and SCIM, and interoperability across vendors is what makes SSO and provisioning portable rather than proprietary.
Related on Start with Identity
- GlossaryAuthorization Code Flow
The recommended OAuth 2.0 flow for apps with a user: the app receives a short-lived code, then exchanges it for tokens from a back channel. Combined with PKCE f
- GlossaryCIBA
Client-Initiated Backchannel Authentication. An OpenID Connect flow where authentication is initiated on one device and approved on another, useful for call cen
- GlossaryClaims
Statements about a subject carried in a token, such as subject identifier, email, roles, or expiry. Relying parties make authorization decisions from claims, so
- CVEDrupal Simple OAuth/OIDC auth bypass via an alternate path
Drupal Simple OAuth / OIDC 6.0.0 through 6.0.6 allowed authentication to be skipped on an alternate path. Patched in 6.0.7.
- CVEKeycloak session hijack via prompt=login re-authentication
Starting a new authentication with prompt=login could hijack an existing Keycloak session. The re-auth step did not bind to the original user tightly enough. Pa
- CVEOpenID private_key_jwt audience ambiguity
The OpenID Connect twin of CVE-2025-27371. private_key_jwt audience is ambiguous at the spec layer, so a client assertion can be replayed across authorization s