# A Dynamic Federated Identity Management Using OpenID Connect
## 6 Conclusions and Future Work  
In this study, a dynamic FIM model was proposed based on OIDC, which allowed organizations to establish identity federation dynamically at runtime. By that, manual FIM establishment was alleviated, and the dynamic approach enabled organizational collaborations, removing the barriers on the IT sector. The proposed model consisted of three major steps: The first step was dynamic discovery that was concerned with revealing the location of the OpenID provider (OP) for OpenID relying parties (RPs). The model was based on OIDC's discovery specification [8], which allowed relying parties to detect the location of the OP through WebFinger requests in order to be able to utilize OIDC services for end-users. In order for an RP and an OP to initiate OIDC services, the RP needed to be registered as a client at the OP, hence the need for the second step, dynamic client registration. During client registration, a trust model had to be established between both RPs and OPs that allowed them to trust information communicated between each other. The third step was the dynamic trust establishment between OPs and RPs. The proposed model specified how trust could be dynamically established by resolving it from a common trusted third party. The model was designed and implemented in a controlled environment to prove its feasibility. Implementing dynamic FIM can save hundreds of hours and effort for organizations to establish identity federation and to effectively scale up to hundreds of collaborations.  
The proposed dynamic identity federation model does not only benefit business organization, but can be extended to health organizations, IoT operations and many other deployment cases. In the case of a health organization, patients can make a great use of identity federation. If [PERSON] was a patient at hospital \(A\) and decides to go to hospital \(B\), the proposed model will allow hospital \(B\) to establish a trust federation with hospital \(A\) to access all of [PERSON]'s medical records, history and medications records that are stored at hospital \(A\). [PERSON] will have a single identity and will be able to use it across all hospitals that support the proposed dynamic identity federation model because it allows them to dynamically establish a trust relationship and start exchanging identity information.  
To that end, this study is an initial prototype and proof of concept toward a fully functional browser plugin or application that offers FIM in an easy and transparent way. In addition, we need to do more in terms of usability, scalability and performance testing to see if the proposed model is feasible in the real world. Furthermore, we need to conduct a comprehensive study and threat model analysis for the security and privacy concerns.  
A.A.: Conceptualization, Investigation, Validation, Visualization, Methodology, Supervision. N.Y.: Data curation, Formal analysis, Methodology, Software, Writing--original draft. Y.H.: Project administration, Writing--review & editing, Supervision. All authors have read and agreed to the published version of the manuscript.  
The study was carried out at Birzeit University with no funding or financial support.  
All data and implementation steps are included in the manuscript. However, any further details can provided upon request to [EMAIL_ADDRESS].  
The authors declare no conflict of interest.