> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.id.me/guides/shared-signals-framework/ssf-overview/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.id.me/_mcp/server.

# Overview

> Overview of the ID.me Shared Signals Framework (SSF) for near real-time exchange of security events between ID.me and relying parties.

The Shared Signals Framework (SSF) is a framework designed to enable the exchange of security-related information, or “signals,” between different entities. OpenID RISC (Risk and Incident Sharing and Collaboration) is a specific implementation that leverages the principles of SSF for sharing security-related events in near real-time between identity providers (IdPs) and relying application parties. This helps organizations improve their response time to potential risks, such as account takeover.

ID.me’s SSF Interface will differ from the existing Events API in the following ways:

* Provides updates in near real-time
* Shifts from a pull-based to a push-based system
* Targets a more defined set of user attribute events
* Built to support an immense volume of messages (hundreds of thousands per minute)

The API will send near real-time user events focused around security-related incidents or activities, such as account compromise or credential changes. These events will enable customers to rapidly respond to potential threats and take immediate action. The API pushes events to the customer through a security event token (SET) delivery using HTTPS. The customer will ingest the events into their repository using a compliant receiver.

## Resources

Below are some resources for getting started with the SSF.

**Specs**

* SET [*RFC 8417 - Security Event Token (SET) - IETF Datatracker*](https://datatracker.ietf.org/doc/html/rfc8417)
* SSF [*OpenID Shared Signals Framework Specification 1.0 - draft 03*](https://openid.net/specs/openid-sharedsignals-framework-1_0.html)
* RISC [*OpenID RISC Profile Specification 1.0 - draft 02*](https://openid.net/specs/openid-risc-profile-specification-1_0.html)

**Resources**

[*Shared Signals*](http://sharedsignals.guide) by Cisco

> Overview of the ID.me Shared Signals Framework (SSF) for near real-time exchange of security events between ID.me and relying parties.