CROSS-ORIGIN-IDENTITY

Cross-domain browser SSO post-third-party-cookies.

Definition

FedCM (W3C Working Draft, Chrome lead) replaces third-party cookies for identity federation, exposing a navigator.credentials.get({identity}) API that shows an account chooser to the user. Storage Access API enables user opt-in for third-party storage. Apple ITP (Intelligent Tracking Prevention) blocks third-party cookies by default since 2017.

Origin

Apple ITP June 2017 ; FedCM proposal W3C 2021 ; Working Draft 2024.

Example in context

An e-commerce site uses FedCM API to offer "Sign in with Google" without depending on third-party cookies from Chrome 124.

Related terms

• OIDC — identity protocol.