🏆Abblix OIDC Server Is OpenID Foundation Certified

Abblix OIDC Server has achieved OpenID Foundation certification across all 11 conformance profiles — both provider and logout. During the certification process, we skipped zero tests and received zero warnings. All 634 tests passed.

We're extremely proud of this result. It reflects how we approach everything we build.

📋 What OpenID Certification Means

The OpenID Foundation runs conformance test suites that verify whether an implementation correctly handles the OpenID Connect protocol — from authorization flows and token handling to session management and logout. Certification is not automatic: implementations must pass every test in each profile with no failures or interruptions.

The OpenID Certified mark signals to developers and organizations that the library has been independently verified for interoperability, security, and standards compliance.

✅ Our Results

We certified for all 7 regular profiles and all 4 logout profiles, covering every response type combination:

Regular Profiles — 532 tests

Profile	Response Types	Tests
Basic OP	code	36
Implicit OP	id_token	58
Hybrid OP	code id_token	102
Config OP	config	1
Dynamic OP	code, code id_token, code id_token token, code token, id_token, id_token token	127
Form Post OP	basic, implicit, hybrid	196
3rd Party-Init OP	code, code id_token, code id_token token, code token, id_token, id_token token	12

Logout Profiles — 102 tests

Profile	Response Types	Tests
RP-Initiated OP	code, code id_token, code id_token token, code token, id_token, id_token token	66
Session OP	code, code id_token, code id_token token, code token, id_token, id_token token	12
Front-Channel OP	code, code id_token, code id_token token, code token, id_token, id_token token	12
Back-Channel OP	code, code id_token, code id_token token, code token, id_token, id_token token	12

Total: 634 tests. Passed: 634. Skipped: 0. Warnings: 0.

Verify our results directly on the OpenID Foundation website:

• Certified OpenID Providers & Profiles
• Certified OpenID Providers for Logout Profiles

💡 Why This Matters

The OpenID Foundation allows implementations to skip tests and still achieve certification. Many do — some skip edge cases that are hard to implement, others accept warnings and move on. We decided early on that we wouldn't take that path.

Our rule was simple: every test must pass. No skips, no warnings, no exceptions. If a test failed, we fixed the implementation — not the test plan. If a test exposed an edge case we hadn't considered, we treated it as a gap in our code, not an inconvenience in the test suite.

The certified providers list includes dozens of implementations, but only a handful certify for all 7 regular profiles, and even fewer add all 4 logout profiles on top. At the time of certification, Abblix OIDC Server is the only .NET implementation:

• certified for Dynamic OP and 3rd Party-Init OP profiles
• having all 11 profiles certified with zero warnings and zero skipped test cases

🚀 Get Started

Ready to try it? See our 🚀 Abblix OIDC Server 2.x Release Announcement for installation, features, and roadmap.

💬 Questions?

Have questions about the certification process, specific test profiles, or how Abblix handles a particular OIDC flow? Ask below or open a Q&A discussion.