The FIDO Alliance plans to develop standards for artificial intelligence (AI) agentic interactions and commerce that will define trusted mechanisms for how agents authenticate, act and transact on behalf of users.

In these initiatives, the group will leverage its track record of delivering standards as well as its work to replace passwords with passkeys and advance digital credentials, the FIDO Alliance said in a Tuesday (April 28) press release.

One initiative is the FIDO Alliance’s formation of an Agentic Authentication Technical Working Group that will focus on how users can delegate actions to AI agents securely, privately and with strong, phishing-resistant authentication.

In the FIDO Alliance’s other new initiative, its Payments Technical Working Group will work on developing specifications for agent-initiated commerce. This effort will draw from two contributions: Google’s Agent Payments Protocol (AP2) and Mastercard’s Verifiable Intent framework. The working group will review and further develop these contributions.

Google said in a Tuesday blog post that it donated AP2 to the FIDO Alliance to further scale the technology and promote industry-wide innovation. The company highlighted the FIDO Alliance’s renown as a creator of open standards.

“Transitioning ownership to the FIDO Alliance ensures AP2 remains platform-agnostic and community-led, while accelerating adoption of secure agentic payments,” Stavan Parikh, vice president and general manager, payments at Google, said in the post.


More

Benchmark: HID adds governance layer to FIDO authenticators with Enterprise Attestation

Passkeys have made real progress in reducing phishing risk, but they do not tell an…

Read More →

CISO Tradecraft® Podcast: Passwordless Authentication

In this discussion, G. Mark Hardy and Nishant Kaushik explore the necessity of moving beyond…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.