Standards and Conformance

Conforming to Standards Protects Your Users

Industry standards are designed, developed and vetted by experts and help ensure a high baseline of security.

Industry Standards to Future-Proof Your Investment

In today’s fast-paced and competitive digital world, organizations cannot afford to invest time and money in technology that doesn’t integrate easily with other solutions, creates vendor lock-in, makes it challenging to recruit new talent, or is proven not to be reliable. The Curity identity Server is built on established industry standards that are proven and tested, supporting the security of your organization over the long-term.

Industry Certifications

Curity Identity Server has been certified to conform to the OpenID Connect and Mobile Connect standards. In particular, the Curity product has been self-certified to comply with the basic, implicit, hybrid and configuration protocols of OpenID Connect. Support for Mobile Connect v. 1.1 has been certified by GSMA.

OpenID Connect

GSMA Mobile Connect

NGINX

A Growing List of Supported Standards

Curity Identity Server enables the use of a wide range of identity-related standards. It supports a growing list of OAuth, OpenID Connect, SCIM and related protocols from standard bodies such as IETF, OpenID Foundation and OASIS. In addition to integration standards, a large number of user authentication standards such as Kerberos, TOTP and SAML, are also supported.

OAuth

OAuth is an open standard, which provides clients secure delegated access to server resources on behalf of a resource owner. It can be complex though and the Curity Identity Server helps you manage these complexities, making it easier to use, customize and deploy.

RFC or Spec	Name	Purpose of Standard

Standards Don't Write Themselves

At Curity, we don't just work with standards; we help set them. Here are some IETF Drafts and RFCs that a Curity person has been involved in creating and developing.

IETF Drafts and RFCs

IETF Drafts and RFCs that a Curity person been involved with.

RFC or Spec	Name	Purpose of Standard

SOC 2 Type 1 Compliance

As part of an ongoing commitment to the highest security standards, Curity has achieved a Service Organization Control (SOC) 2 Type 1 certification, a voluntary cybersecurity attestation and audit. This cybersecurity milestone recognizes the priority that Curity places on protecting client data and further supports Curity’s growing client base.