Education

The job identity does in this industry

Education identity is uniquely federated. A researcher accesses resources across institutions; a student moves through enrollment, graduation, and alumni status; K-12 has the additional constraint of minor privacy. InCommon (US) and eduGAIN (global) provide research and education federations.

Regulatory floor

FERPA governs student educational records in the US. COPPA imposes strict requirements on children under 13. State laws (e.g., California SOPIPA) add layers. Outside the US, GDPR applies with elevated standards for minors.

Use cases by segment

• K-12: Class roster integrations (OneRoster, Clever), single sign-on to dozens of edtech tools, parent portal identity
• Higher education: Federated research access, library resource federation, student information system integration
• Online learning: Massive-scale CIAM for MOOCs, certificate identity verification, proctoring identity binding
• Edtech vendors: B2B SaaS into districts, FERPA-compliant data handling, district SSO support

Vendor landscape

Microsoft Entra (Education tier) dominates K-12 due to Microsoft 365 Education pricing. Okta competes strongly in higher ed. Duo Security is the MFA standard at universities. Clever and ClassLink are the K-12 SSO specialists. Shibboleth remains widely deployed in research federation.

Common pitfalls

• Building identity that breaks every September with new student cohorts
• Underestimating the operational cost of FERPA disclosure tracking
• Not supporting Shibboleth in higher-ed deployments
• Treating parent identity as an afterthought in K-12 platforms
• Failing to handle the "alumni" lifecycle — accounts that should persist but with reduced entitlements

Outlook

Verifiable credentials (digital diplomas, micro-credentials) are the most promising near-term application of decentralized identity. K-12 privacy laws will tighten further at the state level. Expect proctoring identity controversies to continue as AI cheating arms races escalate.