Where WeftID is going, in rough order. This is direction, not a delivery commitment: priorities move as we ship and learn. WeftID is a multi-tenant federation layer that federates to both SAML and OIDC providers and is itself an OpenID Provider: applications can offer a "Sign in with WeftID" button. As of 2.0 it passes the OpenID Foundation conformance suite in both roles. What remains is social sign-in, directory sync, and an identity layer that SaaS builders can embed.
WeftID passes the OpenID Foundation conformance suite as a provider and as a relying party. Sign-out reaches every connected app and identity provider, and applications can use device sign-in, register themselves, and authenticate with a private key.
Federate to upstream providers that speak OIDC alongside SAML. Presets for Google Workspace and Microsoft Entra ID, and a generic connector for Keycloak, Auth0, or any spec-compliant provider. Domain routing works across both protocols. With the provider side shipped in 1.11, the loop is closed: OIDC in and OIDC out.
WeftID is an OpenID Provider: your applications get a "Sign in with WeftID" button, a signed ID token, per-tenant discovery and JWKS endpoints, and scope-gated claims including DAG-aware group memberships. Access is granted by group, the same way SAML apps work.
Put WeftID sign-in in front of HTTP apps that have no SSO of their own: internal dashboards, homelab and small-team tools. Your reverse proxy enforces access; the app stays untouched.
Google, GitHub, Apple, and Microsoft login for end users, built on the 1.12 OIDC connector.
Reflect Workspace users and groups into WeftID, the way Okta and Entra already do over SCIM (Workspace does not push SCIM, so this uses the Admin SDK).
Additional vendor profiles on top of today's Slack, GitHub Enterprise, Atlassian, and GitLab.
Provision organizations through an API, let your customers configure their own SSO and SCIM, and integrate through webhooks and hosted login, so a product can ship enterprise-ready identity without building it. Sign in with WeftID is the first piece of this; the control plane is the rest.
Need something on this list sooner? Try WeftID, or start a conversation on GitHub.