Kantara Initiative

This article has multiple issues. Please help improve it or discuss these issues on the talk page. (Learn how and when to remove these messages) This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed. Find sources: "Kantara Initiative" – news · newspapers · books · scholar · JSTOR (November 2018) (Learn how and when to remove this message) This article contains promotional content. Please help improve it by removing promotional language and inappropriate external links, and by adding encyclopedic text written from a neutral point of view. (July 2019) (Learn how and when to remove this message) This article may rely excessively on sources too closely associated with the subject, potentially preventing the article from being verifiable and neutral. Please help improve it by replacing them with more appropriate citations to reliable, independent, third-party sources. (August 2019) (Learn how and when to remove this message) (Learn how and when to remove this message)

Kantara Initiative

Founded	2009
Type	Information Technology and Services – Industry consortium and professional trade organization
Focus	Trust framework conformity assessment, assurance and Trust Mark operations for digital identity management and personal data privacy
Origins	Founded by private sector identity management industry vendors, later joined by government agencies and individual subject matter experts
Method	Programs, Recommendations, Conferences, Publications
Key people	Kay Chopard (Executive Director) Lynzie Adams (Executive Programs Manager) Andrew Hughes (Chair of the Leadership Council)
Website	kantarainitiative.org

Kantara Initiative, Inc. is a non-profit trade association that works to develop standards for identity and personal data management. It focuses on improving the trustworthy use of identity and personal data in digital identity management and data privacy.

Kantara translates to "wooden bridge" in Kiswahili, which is the inspiration for the bridge of Kantara’s logo. The name is attributed^{[by whom?]} to Nat Sakimura, a Kantara founding board director and Open ID Foundation chair, who spent his childhood in Africa.

Kantara drafts technical specifications and recommendations for industry use and submits them to standards development organizations, such as Organization for the Advancement of Structured Information Standards (OASIS), Worldwide Web Consortium (W3C),^[1] Internet Engineering Task Force (IETF)^[2] and SC27 (Security Techniques) Working Group 5 (Identity Management and Privacy) of the International Organization for Standardization (ISO).

Kantara provides input to policy bodies such as OECD as well as some inter-government initiatives related to identity management and personal data agency.

• The Kantara Assurance Framework facilitates the 3rd party assessment and assurance of providers' services seeking conformance to NIST 800-63-3 at IAL 2 and AAL2, which was expected to extend to FAL2 later in 2019.^[3][4]
• The Kantara Consent Receipt specification v1.1 underwent a minor revision, and simultaneously a more generic broader-based information-sharing framework (from which the Consent Receipt was partly derived) was s being developed in response to community feedback interested in standardizing an expanding suite of profiles.^[5][6] An example of the Consent Receipt is referenced in the standard ISO/IEC 29184 Online privacy notices and Consent. According to the initiative's executive director, the idea behind the consent receipt is for individuals and companies to both be able to maintain and manage permissions for personal data.^[6]
• The Kantara User-Managed Access (UMA) specification—a set of standardized extensions to OAuth 2.0 aimed at asynchronous user permissioning and delegated authorization—has stabilized at V2.0^[7][8] with the early adopter implementers now standardizing profiles and extensions. A Business and Legal framework is being developed to complement the technical protocol framework already completed. UMA received the Best Innovation Security Award from the European Identity & Cloud Conference 2014.

Of completed projects, the following are noteworthy:

• Kantara completed the project of incubating the IDPro project in 2017.^[9][10] IDPro is now a 501(c)6 industry association for digital identity professionals. Kantara will continue to develop the Body of Knowledge for the good of IDPro and the community. This effort was kicked off in 2016 with an electronic pledge where digital identity professionals signify their support for a digital identity professional association and Kantara’s principles.^[11]
• Kantara has all but completed the Applied R&D project with Rutgers University’s Command, Control, and Interoperability Center for Advanced Data Analysis (CCICADA), a US Department of Homeland Security University Center of Excellence, a main component of the KIPI (Kantara Identity and Privacy Incubator) program. Two projects to progress through all three phases to transition to commercialization are Mobile Device Attribute Verification (MDAV)^[12] and NFC4PACS.^[13] Kantara's R&D grant funding currently centres around NGI_Trust (a project under the European Commission's H2020 program) where Kantara Europe is a consortium partner. Kantara's publishes the outputs from its workgroups on its website where they are free to download.

The initiative was established in 2009 by a group of identity management (IDM) technical interoperability organizations using a bi-cameral system of governance.^[14] Responding to industry consortia fragmentation, Kantara aimed to form a unified, transparent and inclusive member organization for digital identity community stakeholders.

In 2011, Kantara focused on serving the needs of relying parties. Kantara did so by developing assessment, assurance, and trust marks for federated trust frameworks, as well as developing urgently needed specifications quicker than the lengthy processes undertaken by Standards Development Organizations (SDOs). Private and public sector relying party organizations (initially from the United States, but globally as of 2024) joined the initiative to develop identity and credential requirements and operate conformance and assurance programs, thus complementing the missions and outputs of other industry consortia, such as PDEC (Personal Data Ecosystem Consortium), Customer Commons the CARIN Alliance,^[15] Identity Commons,^[16] FIDO Alliance and IDESG (assets transitioned to Kantara Educational Foundation in June 2018^[17]).

Formerly an affiliate program under IEEE-ISTO, Kantara Initiative self-incorporated as a 501(c)6 nonprofit organization in January 2016.^[18] In 2018, two financially separate but similarly missioned and branded organizations were established—Mittetulundusuhing Kantara Initiative Europe, an Estonian based Trade Association, and Kantara Initiative Educational Foundation Inc, a US incorporated 501(c)3 in the US.^{[citation needed]}