Rules and Guidelines

This FIDO Developer Challenge (the “Challenge”) is organized by FIDO Alliance, an industry association, having its registered office at 3855 SW 153rd Drive, Beaverton, Oregon, USA (the “Organizer”).

The aim of these FIDO Developer Challenge Rules (the “Rules”) is to set out the terms and conditions governing your participation in the Challenge. By registering for this Challenge, you fully and unconditionally agree to comply with these Rules. If you do not agree with any of these Rules, do not register for this Challenge and do not submit an entry.


This Challenge begins on June 1, 2021 and ends on October 22, 2021. The Challenge information will be accessible 24 hours a day on the dedicated Challenge website operated by FIDO Alliance at (“the Challenge website”), subject to possible IT maintenance operations and malfunctions. Dates and times in these Rules refer to Eastern Time (ET).


Any eligible person who is registered on the Challenge website and enrolls to participate in the Challenge (“Participant” or “you”), is required to review and accept these Rules. By accessing and accepting these Rules during the creation of your user account and your registration in the Challenge, you:

entered into a valid and enforceable contractual relationship with Organizer regarding participation in the Challenge. The registration and enrolment in the Challenge do not set up any subordination relationship between the Organizer and the Participant; and

fully and unconditionally agreed to comply with these Rules. 

In case of non-respect of these Rules, the Participant will be immediately disqualified from the Challenge and no prize will be awarded.


To take part in the Challenge, we must have received your completed registration by 11:59 pm on July 2, 2021.

To register, the Participant must first submit an application form designated by the Challenge website, and must have truthfully and accurately completed required information, such as full name, email address, etc.

Any registration based on inaccurate, false or incomplete information will result in the Participant’s disqualification. Refusing collection, recording and use of their personal data that is strictly necessary to performing the Challenge will result in the Participant’s disqualification. The participant is solely responsible for the information he/she provides while registering. Any intentional or unintentional mistake, anomaly or inconsistency, regarding this information, may result in the Participant’s disqualification. Organizer reserves the right to undertake all necessary verifications regarding the Participant’s identity, postal and/or email address.

Registration for and participation in the Challenge is free, with no purchase or payment obligation.


This Challenge is open and offered solely to:

Attendees from all backgrounds, genders, and geographies are welcome.

You must be above the age of minority in place your residency to attend the Challenge.

There is no country restriction, but you must be eligible to receive prizes (in case you win) and you are responsible for paying any taxes on the prize winnings. All the documents that may confirm the Participant’s eligibility may be required prior to awarding any prizes (e.g. identity document, student card etc.).

You are responsible for ensuring that your participation in the Challenge complies with any policies your employer. If the Organizer has reason to believe at any time that you violate any of those policies, the Organizer reserves the right to reject your Submission to the Challenge, prohibit you from participating in the Challenge or revoke any prize that you may have received in the Challenge. The Organizer is not responsible for any disputes arising between you and your employer. 

This Challenge is not open to employees and representatives of the Organizer and the members of their families.

Government entities and officials are not eligible for the cash prizes.

This Challenge is void in countries where it is prohibited or restricted by law.


Participation in the Challenge is as a team of 2 – 3 members for the following stages: Registration, Implementation and Final Evaluation.

Teams. Individual Participants may elect to form a team (“Team”) of three (3) members maximum. Each Team member must accept these Rules by checking a box through the online registration form. Organizer may disqualify any Team (and all its members) in the case where any one member has not accepted or violates these Rules.

The goal of the Challenge is for Participants to submit online services or products by implementing FIDO Authentication meeting the requirements determined by the Organizer in the Rules & Guidelines, and that are formalized by deliverables. The Rules & Guidelines includes information regarding various deadlines, details of the prizes, requirements, etc. (the “Rules & Guidelines”). The Rules & Guidelines is accessible through the Challenge website.


During the Challenge, Participants may upload any documents or other materials (such as texts, presentations, videos, link to YouTube videos, etc.) relating to their project to the designated communication platform, that are assigned during Implementation Step, in response to the Organizer’s Challenge (the “Deliverable”).

To be eligible, Deliverables must (i) address the evaluation criteria set out in the Rules & Guidelines, (ii) be in a common digital format, such as, DOC, DOCX, PDF, PPT, PPTX, KEY, ODT, MP3, MPEG, MOV, MP4, and (iii) be in English, and in general terms must comply with these Rules.

If a Deliverable cannot be downloaded, is not in the right format or is incompatible, illegible, or unintelligible, the Deliverable will be disqualified.

By submitting a Deliverable, Participants represent and warrant that:

The Deliverable exclusively includes contributions from Participants and Teams. Otherwise, if any content from a third party has been used in the development of the Deliverable, all rights, authorizations, and agreements necessary to submit the Deliverable and grant the rights mentioned herein have been obtained. The existence of uncredited third-party contributions in the Deliverable will result in the disqualification of the Deliverable and the related Participants;

no other individual and/or entity is entitled to claim any rights from the use of the Deliverable; and

the content of the Deliverable does not and will not knowingly infringe or violate any rights of any third party or entity, including, without limitation, intellectual property rights, privacy, competition law, confidentiality, or any contractual or extracontractual right. All deliverables suspected of violating any law(s) and/or any third party’s right will be ineligible.

Participants are responsible for and shall bear any costs or expenses associated with preparing and submitting Deliverables. Participants assume all risk of damaged, lost, late, incomplete, invalid, incorrect or misdirected Deliverables.


Challenge Steps. The Challenge consists of several steps:

Step One – Online Registration. Applications will be accepted from June 7, 2021 to July 9, 2021, 11:59 pm (PDT).

Step Two – Initial Screening. From July 10, 2021 to July 16, 2021, 11:59 pm (PDT), up to 20 teams with the higher scores can be selected to proceed to the next step. At this step, Organizer may conduct interviews over email, landline and/or online phone calls for further clarifications.

Step Three – FIDO2 API Implementation. Participants will be asked to implement FIDO Authentication API into their services or products and submit their Deliverables from July 26, 2021 to August 27, 11:59 pm (PDT). During this step, team leaders can be invited to online community for close communication and Q&As.

Step Four – Final Evaluation. By September 10, 2021, each team will be asked to make virtual presentation and demo at scheduled date and time.  At the end of this step, the top 3 (three) teams will be announced, and the winning team invited to final demo and award ceremony.

Deliverable. If a Participant who is invited to the FIDO2 API Implementation step does not upload a Deliverable on the designated platform before the deadline of August 27, 2021, this will be considered as a withdrawal from the Challenge. The Participant may not join the Challenge and may not obtain any compensation from the Organizer.

Evaluation Criteria. Deliverables will be judged according to the Evaluation Criteria, described in the Rules & Guidelines. You agree and acknowledge that the Challenge relies on your creativity, capacity, ability, and ingenuity to solve technical or social problems while implementing FIDO protocol for simpler and stronger authentication. The Challenge does not depend, even partially, on chance or luck, and therefore should not be considered as a lottery.

Notification to Participants. Once the selection has been completed at each step, Participants will be notified by email, phone, or by other means, at Organizer’s discretion, of the results of each step. The Organizer will be free to alter the dates on which results are released should this become necessary due to the number of projects to be assessed. The ranking of the finalists decided by the judges will be announced on the day that presentations are made and will identify the winning Participants and projects.

A. Initial Screening

All registrations must be received by Organizer on or before July 9, 2021, 11:59 pm (PDT), unless otherwise noted on the Challenge website. Applications must include:

  • Team name (and reason for choosing such name)
  • Introduction on team leader and its members
  • Overview of web or mobile service that is already (or to be) developed
  • Technical or social challenges that the team is trying to solve
  • Value of FIDO Authentication when implemented into team’s planned service or product
  • Related experiences and portfolio
  • Etc.

For Initial Screening, the judges will give a score to each team based on following category:

  • 25 Points: Have you submitted all the items and contents that are stated in the application?
  • 25 Points: Do you have deep understanding on FIDO Authentication and enough knowledge about how to implement it to your services or products?
  • 25 Points: Have you developed a service or product that can solve technical or social problem that we face?
  • 25 Points: Can you finish your proposing service (or product) development by the deadline?  If you have not fully developed the service (or product), do you have enough resource (e.g., time, people, etc.) to complete within given timeframe?

The top 20 teams with the highest scores can proceed to FIDO2 API Implementation step.

Participants will be informed of the results of Initial Screening by July 23, 2021.

The Organizer’s decision regarding disqualification is final and its decision may not be contested by Participants involved in the project in question or by any other Participant.

B. FIDO2 API Implementation

All FIDO2 API Implementation must be done by Participants on or before August 27, 2021, 11:59 pm. 

Those teams that fail to submit Deliverables, addressing the evaluation criteria set out in Rules & Guidelines by this date can be assumed as disqualified.

Only the teams that submit complete sets of Deliverables can proceed to the Final Evaluation step, making the virtual presentation and demo to jury at the scheduled date and time.

C. Final Evaluation

Participants who have been selected to participate in the Final Evaluation will be directly notified by the Organizer. In the event a Participant does not answer after the Organizer has tried to contact him/her by email and by phone, the Organizer reserves the right, at its sole discretion, to disqualify this Participant. This disqualification shall not entitle the Participant to claim any kind of compensation from the Organizer.

The Final Evaluation may consist of a virtual presentation of the developed services or products by the Participants. Participants are required to upload a Deliverable to the Challenge website by the end of Implementation Step, yet may make minor changes upon consent by Organizer.

The Deliverable will be used as a presentation document during the virtual presentation given by the Participants involved in the Project. The presentation time is 20 min.

At the end of the Final Evaluation, the jury will choose the winning top three (3) teams, based on the following criteria:

Technical Excellence (25%): Have you successfully developed your services (or product) based on your original plan? Is FIDO Authentication working without any issue?

Impact & Coolness (25%): Have you addressed social or technical problem that need to be solved? Does your service or product offer a creative approach to addressing the selected problem?

Team Capability & Diversity (25%): Are your team members consist of capabilities to complete the proposing idea? Do they have required knowledge and experience?

Business Value (25%): Does your proposing service (or product) affect a market that we know and understand? Does it have a market?

The top three (3) teams with the highest scores can be invited to the award ceremony, with the travel expense for the winning team with the highest score covered by the Organizer.

The winners will be informed of the results of Final Evaluation by September 17, 2021.

The Organizer’s decision regarding disqualification is final and its decision may not be contested by Participants involved in the project in question or by any other Participant.

Any attempt to cheat, use fake profiles, use third-party applications that enable false voting linked to cheating, or engage in duplicate voting of which the Organizer becomes aware will result in the disqualification of the project that received these votes, and in the disqualification of this project’s Participants, who will not receive any prize or award. The Organizer’s decision regarding disqualification is final and its decision may not be contested by Participants involved in the project in question or by any other Participant.


The prizes described in the Rules & Guidelines to be awarded to Challenge winners are subject to all of the following conditions. They are awarded to the winners of the Challenge and are subject to compliance with the following cumulative conditions:

The Deliverables comply with Section 6 (“Deliverables”);

Each Participant of a winning project complies with Sections 9 and 11; and

It can be proven that the winning Participants fulfil the conditions of eligibility of Section 4.

No prize will be awarded to winners who do not fulfill the above.

No assignment or transfer of prizes is allowed by a winner. If a potential winner cannot be reached, is unable to accept the prize or any portion of the prize for any reason, Organizer shall have no further obligation to such potential winner. In the event a Participant (a winner) cannot be reached, by email or by phone, for more than three (3) months after the first attempt to reach them was made, he/she will be deemed as having waived their right to claim the prize and will not be entitled to any prize or any kind of compensation.

Organizer will not replace any lost or stolen prizes after being awarded to winners. Winners will accept the prize “as is”. Organizer disclaims any warranty regarding the Prizes.

If the prize as initially planned is unavailable, Organizer will be free to substitute another prize of similar value. Any such decision is at Organizer’s sole discretion.

Any Participant who does not fulfil the conditions of Participation as provided in the Rules during their registration and/or at any time during the Challenge will be summarily disqualified from the Challenge without prior notice and will not be entitled to any prize. In the assumption that a prize is awarded to a Participant who does not meet the conditions of Participation when registering or throughout the duration of the Challenge, Organizer reserves the right to require the Participant to return the awarded prize.


The Participant acknowledges and consents that Organizer may communicate, throughout the world and for the duration of the Challenge and for a period of three (3) years following the Final Evaluation, using the Challenge for publicity, including for Organizer’s advertising or other marketing purposes, by any means and through any format (website, advertising banners, social networks, newsletter, press release) now known or unknown to date, free of charge.

In particular, you consent to the using, by Organizer, of your name and surname, your city and region of residence, the name of the institution in which you studied or in which you obtained your diplomas and other biographical information, your image, the information regarding the Prize (if you are one of the top 3 winners), and any other personal data that you submit with your Deliverables as well as the content of your Deliverables relating to the Challenge.

By signing the Organizer’s Media Consent Form, each Participant authorizes the Organizer to use the photographs, videos or any media of the Participant taken during the Challenge and disseminate them via any communication medium.

Such use does not entitle the winner to any other payment than the Prize he/she received.


Organizer has no obligation to keep the information contained in the Deliverables confidential. In general terms, when submitting any Deliverables, the Participants understand, agree and accept that any information contained therein may be publicly disclosed by the Organizer.

If you are a prize winner, Organizer may request that you execute a confidentiality/non-disclosure agreement for the purpose of entering into negotiations regarding the further development of your project, as described in your Deliverable. Such confidentiality/non-disclosure agreement will be directed to your Deliverable and all intellectual property that it may contain.

Furthermore, Participants acknowledge that Organizer may currently or in the future be developing information internally, or receiving information from other parties, that is similar to the information contained in any of the projects. Accordingly, nothing herein shall prohibit Organizer from independently acquiring, developing, or having developed for it, products, concepts, systems, services, or techniques that are similar to or compete with the products, concepts, systems or techniques contemplated by or embodied in any Deliverable.

The Participants recognize that other Participants, individuals or entities may have provided Organizer or others, or made public, or may in the future submit, or make public, content that is the same or similar to any piece of information contained in any of the projects. Hence, the Participants acknowledge, agree and accept that Organizer shall have the right to use such same or similar materials, and that the Participants will not be entitled to any compensation arising from Organizer’s use of such materials.


Definitions. For the purposes of this section,

“Intellectual Property Rights” refers to any copyright or other rights over a brand, a design or a model, a patent and, more generally, any element, (including trade secrets and know-how), that may be protected by national and/or international laws or conventions on intellectual property (“Intellectual Property Rights”)

“Previous Rights” refer to any Intellectual Property Rights and/or any associated know-how held by the Participants before the start date of the Challenge (“Previous Rights”)

“Creations” refer to any software (including source and object code software), database, technical specifications, text, design, model, information, knowledge, method, process or product, as well as any resulting elements and/or processes likely or otherwise to be protected according to national and/or international laws or conventions on intellectual property developed by any Participant as a part of any submitted deliverable throughout the Challenge (“Creations”).

Warranty of non-infringement. When submitting any Deliverable, at any stage of the Challenge, each Participant guarantees to Organizer that he/she is the co/owner and/or co/holder of the Intellectual Property Rights regarding all or part of the Creations contained in the Deliverables submitted at any stage of the Challenge, and that he/she has obtained all rights and permissions regarding all pre-existing Creations and any elements of the Deliverables for which he/she does not hold the relevant rights.

Each Participant guarantees (i) that his/her contribution is original and unprecedented; (ii) that it do not infringe upon the copyright or any Intellectual Property Rights of any third party; (iii) that all the elements of which his/her submissions are formed, as well as all pieces of contributions and information communicated in the submission presentation documents are accurate, reliable and complete; and (iv) that the submission of the relevant Deliverables does not constitute an act of unfair competition of any kind.

It is compulsory for Participants to indicate the source of any pre-existing Creations of whichever nature and on whichever support that are included in any submitted deliverable. Any Deliverable involving several Participants constitutes a collaborative work and it should be treated as such in accordance with the applicable regulation in force.

Participants are solely responsible for the content that they create, publish or upload to the Challenge website or present, and for the transfer of technologies or information with which Participants are involved. The Organizer expressly disclaims any liability or responsibility thereto.

Liability. Organizer cannot be held liable for any infringement of the above provisions by Participants. Each Participant shall indemnify Organizer, its officers, directors, servants, board of governors, employees and agents from and against any disturbance, action, claim, opposition and demand, eviction attempt, damages, losses and costs (including, but not limited to, reasonable attorneys’ fees and costs) related to any third party claims in connection with any Creation in the Deliverables (Intellectual Property Rights included).

Participant owner of Intellectual Property rights. By submitting a Deliverable and participating in this Challenge, you are not granting Organizer any rights to any intellectual property supporting all of part of the Deliverable and Organizer makes no claim to ownership of your Deliverable or any intellectual property that it may contain.


Update of the Rules. The Organizer reserves the right to amend these Rules at any time, including the Challenge duration in case of operational imperatives, without prior notice to Participants regarding the enforcement or the validity of these amendments. Participants are encouraged to consult these Rules regularly. Participants expressly waive all claims or disputes related to any amendment to these Rules by the Organizer.

Should any paragraph of these Rules be declared or judged illegal, unenforceable or void by a court decision, the paragraph in question will be considered null and void, but all other unaffected paragraphs will be enforced within the limits of the law.

Challenge Cancellation or Suspension. The Organizer reserves the right in its discretion, to (i) cancel, terminate, modify or suspend the Challenge and these Rules, for any reason, at any time and without any liability, and (ii) to limit or restrict participation in the Challenge. The Organizer will not be held liable for the modification, cancellation or suspension of the Challenge and no compensation or remuneration will be due to the Participants.


The Organizer has no control over the behavior of members, mentors or other users of the Challenge website. The Organizer does not control the information provided by others (including mentors, members and users) that is made available through the Challenge website; other user’s information may be inaccurate. You acknowledge that mentors cannot be held liable for advice that is offered to you or other members.

Members act under their sole and full responsibility.

The Organizer cannot be held liable if a Challenge fails to occur as intended, such as because of:

Delays or failure to perform due to fire, explosion, flood, war, embargo, governmental action, act or order of a public authority, strike, pandemic or epidemic, public health emergency or communicable disease outbreak or to any other cause beyond its control.

The Organizer is not responsible for the behavior of members during, before or after a Challenge or at any other time.

The Organizer is not responsible for the content or use of any Deliverables, for the Participant’s lack of success in a Challenge, for any damage caused to a Participant by mentors or other users, for any indirect damage such as financial loss, loss of business or moral damage that a Participant may suffer through its use of the Challenge website or by participating in a Challenge.

If you have a dispute with another member, you hereby release Organizer, its officers, directors, servants, board of governors, employees and agents from all claims of any kind arising out of such dispute.

Organizer shall not be liable to you for any damages, claims, expenses or other costs you incur as a result of third-party claims related to your use of the services. Under no circumstances, shall Organizer be liable for any indirect damages, or for any damages totaling more than one dollar ($1), assuming that such damages have been duly proven. You agree that you will be responsible for, and at Organizer’s request, defend Organizer from third party claims arising out of information you provide to Organizer for publication or any breach by you of these Rules and the Terms and Conditions Including Assumption of Risk, Release of Liability, Waiver of Claims and Indemnity Agreement.

You agree to defend, indemnify and hold harmless Organizer, its officers, directors, servants, board of governors, employees and agents from any and all costs, damages, liabilities and losses arising out of or in any way from your access to the Website and its services and/or in connection with all details, information and data that you upload onto the Website or the placement or transmission of any message, information, software or other materials through the Website by you or any users of your account or any violation of these Rules by you or any users of your account.

The Organizer will in no way be held liable in the event of breakdown or failure, regardless of the cause, of any telecommunications network used that causes Participants difficulty in or prevents Participants from identifying themselves on or gaining access to the Challenge website.

Participants agree that company, its affiliates and all of their respective officers, directors, employees, contractors, representatives and agents (“released parties”) will have no liability whatsoever for, and will be released and held harmless by Participants for any claims, liabilities, or causes of action of any kind or nature for any injury, loss or damages of any kind including direct, indirect, incidental, consequential or punitive damages to persons, including without limitation disability or death. Without limiting the foregoing, everything on the Challenge website and in connection with the Challenge is provided “as is” without warranty of any kind, either express or implied, including but not limited to, the implied warranties of merchantability, fitness for a particular purpose, and non-infringement. Some jurisdictions may not allow the limitations or exclusion of liability for incidental or consequential damages or exclusion of implied warranties, in which case such limitation or exclusion shall apply only to the extent permitted by the law in the relevant jurisdiction.

Participation in the Challenge implies acknowledgment and acceptance of the characteristics, limits, and risks of the internet and related technologies, particularly with regards to performance, response time, security of software and computer equipment against various potential attacks, such as viruses, logic bombs or Trojans, and loss or misuse of data. As a result, the Organizer will not be held liable in any way for any damage incurred by Participants arising from these characteristics, limits and risks, which Participants accept by registering and taking part in the Challenge.

The Organizer will not, in any case, be held liable for damages resulting from faults with or delays in the submission of deliverables by Participants, including refusal to accept these deliverables as a consequence of their submission outside the deadlines set out in the Rules, from faults with or delays to the sending of any emails by the Participant sent as part of the Challenge, or from any alterations made to the deliverables independently of the Organizer.

The Organizer will not, in any case, be held liable for damages resulting from services provided by a third party relating to the prizes.

The Organizer will not be held liable for the consequences of a Participant’s disqualification from the Challenge as a result of their violation of these Rules.


Participation in the Challenge requires the communication of the Participant’s personal data (“Personal Data”).

In using the Challenge website and registering as a Participant, you acknowledge and accept the processing of your personal data by Organizer.


Any Participant’s claims arising from the Challenge should be addressed no later than thirty (30) days following the Challenge end date to All claims must include: (i) the Participant’s complete contact details (name, address, email address and phone); (ii) the name of the Challenge; and (iii) a clear and detailed explanation for the claim.


The Terms and Conditions Including Assumption of Risk, Release of Liability, Waiver of Claims and Indemnity Agreement and Rules are governed and construed in accordance with laws of the State of California and the federal laws of the United States applicable therein, without giving effect to any principles of conflicts of law.

If the dispute between you and the Organizer cannot be settled by mediation, you irrevocably and unconditionally attorn to the exclusive jurisdiction of the state and federal courts of the San Jose, California and all courts competent to hear appeals therefrom.