# Roadmap 2026

Here we present the eSignet product roadmap for 2026 and our strategic horizon forward. This roadmap outlines the planned features, progress, and release details for eSignet. 

> **Annual product cycle** of eSignet commences in **January** and concludes in **December**.

<details>

<summary>Vision</summary>

In 2026, eSignet will focus on strengthening its foundation and expanding advanced authentication capabilities. The year begins with a full migration from Java 11 to Java 21 across all eSignet components, improving performance, security, and long-term maintainability. eSignet will introduce Face Authentication to support on-the-go, high-assurance user verification, followed by Single Sign-On (SSO) to enable seamless access across services. The Signup module will evolve into a standalone identity verification portal, and the year will conclude with the addition of CIBA support, enabling secure and user-friendly decoupled authentication. Continuous performance and stability improvements will run throughout the year to ensure eSignet remains production-ready at scale.

</details>

<table><thead><tr><th width="82.57421875">Priority 🗓️</th><th width="366.38671875">Features 🛠️</th><th width="100.5859375">Details📝</th><th width="152.140625">Status 📊</th><th>Release 📌</th></tr></thead><tbody><tr><td>P1</td><td><strong>Java 21 Migration</strong>:<br>Upgrade all eSignet repositories from Java 11 to Java 21 to improve performance, security, and long-term maintainability.</td><td><i class="fa-github">:github:</i> TBA</td><td>🟠 In-Progress</td><td></td></tr><tr><td>P1</td><td><strong>eSignet Performance Improvements (v1.7.x with MOSIP ID)</strong>: <br>Optimise eSignet service performance and stability when integrated with MOSIP ID for high-volume identity transactions.</td><td><i class="fa-github">:github:</i> TBA</td><td>🟠 In-Progress</td><td></td></tr><tr><td>P1</td><td><strong>UserInfo as Encrypted JWE</strong>: <br>Support returning UserInfo as encrypted JWE, passing signed JWTs securely to relying parties.</td><td><i class="fa-github">:github:</i> TBA</td><td>🟠 In-Progress</td><td></td></tr><tr><td>P1</td><td><strong>Signup Form Enhancements – Multiple Input Types</strong>: <br>Enhance Signup forms to support diverse input types for better usability and extensibility.</td><td><i class="fa-github">:github:</i> TBA</td><td>🟠 In-Progress</td><td></td></tr><tr><td>P1</td><td><strong>Face Authentication with eSignet</strong>: <br>Introduce face authentication as a high-assurance, on-the-go authentication factor in eSignet.</td><td><i class="fa-github">:github:</i> TBA</td><td>🔵 Planned</td><td></td></tr><tr><td>P1</td><td><strong>Signup Portal Enhancements for Flexible eKYC</strong>: <br>Streamline Signup and eKYC flows to integrate with any authentication server or identity system.</td><td><i class="fa-github">:github:</i> TBA</td><td>🔵 Planned</td><td></td></tr><tr><td>P1</td><td><strong>Single Sign-On (SSO) / Super App Support</strong>: <br>Enable SSO capabilities to support super apps and seamless cross-application login experiences.</td><td><i class="fa-github">:github:</i> TBA</td><td>🔵 Planned</td><td></td></tr><tr><td>P1</td><td><strong>CIBA Support</strong>: <br>Add Client-Initiated Backchannel Authentication (CIBA) support for secure, decoupled authentication flows.</td><td><i class="fa-github">:github:</i> TBA</td><td>🔵 Planned</td><td></td></tr><tr><td>P1</td><td><strong>MFA Support – Relying Party</strong>: <br>Enable relying parties to define and enforce multi-factor authentication by combining 2 or more authentication factors.</td><td><i class="fa-github">:github:</i> TBA</td><td>🔵 Planned</td><td></td></tr><tr><td>P1</td><td><strong>FAPI 2.0 Compatible RP Backend Library</strong> - <br>Provide a reference backend library to help relying parties integrate with eSignet in a FAPI 2.0-compliant manner.</td><td><i class="fa-github">:github:</i> TBA</td><td>🔵 Planned</td><td></td></tr><tr><td>P2</td><td><strong>Timeout Management in Signup eKYC Flow</strong>: <br>Improve timeout handling and recovery mechanisms in Signup eKYC workflows.</td><td><i class="fa-github">:github:</i> TBA</td><td>🔵 Planned</td><td></td></tr><tr><td>P2</td><td><strong>Signup Performance Benchmarking with Mock Verifier</strong>: <br>Benchmark Signup performance using a mock eKYC verifier with MOSIP ID repository.</td><td><i class="fa-github">:github:</i> TBA</td><td>🔵 Planned</td><td></td></tr><tr><td>P2</td><td><strong>Performance Optimization of Java 21 Codebase</strong>: <br>Further tune and optimize eSignet performance after Java 21 migration.</td><td><i class="fa-github">:github:</i> TBA</td><td>🔵 Planned</td><td></td></tr><tr><td>P2</td><td><strong>MFA Support – User Level</strong>: <br>Allow users to manage and use multiple authentication factors during login.</td><td><i class="fa-github">:github:</i> TBA</td><td>🔵 Planned</td><td></td></tr><tr><td>P2</td><td><strong>eSignet General Availability (GA) – LTS Release</strong>: <br>Deliver a stable, long-term support (LTS) release of eSignet for production deployments.</td><td><i class="fa-github">:github:</i> TBA</td><td>🔵 Planned</td><td></td></tr><tr><td>P3</td><td><strong>Passkey Authentication Support</strong>: <br>Enable passkeys for passwordless, phishing-resistant authentication.</td><td><i class="fa-github">:github:</i> TBA</td><td>2027</td><td></td></tr><tr><td>P3</td><td><strong>OpenG2P Integration (SPAR Accounts)</strong>: <br>Support fetching user benefit or payment accounts from OpenG2P via SPAR by enabling token exchange flows to issue pairwise subject identifiers across services.</td><td><i class="fa-github">:github:</i> TBA</td><td>2027</td><td></td></tr><tr><td>P3</td><td><strong>QR Code Standardisation</strong>: <br>Standardise QR-based authentication and login flows across implementations.</td><td><i class="fa-github">:github:</i> TBA</td><td>2027</td><td></td></tr><tr><td>P3</td><td><strong>Signup service - Expired Claim Detection &#x26; Re-Verification</strong>: <br>Detect expired verified claims and automatically trigger re-eKYC workflows. </td><td><i class="fa-github">:github:</i> TBA</td><td>2027</td><td></td></tr><tr><td>P3</td><td><strong>Consent Handling for Child and Deceased Users</strong>: <br>Support delegated and special-case consent management scenarios</td><td>.<i class="fa-github">:github:</i> TBA</td><td>2027</td><td></td></tr><tr><td>P3</td><td><strong>External Consent Provider Integration</strong>: <br>Enable consent to be obtained and validated via external consent systems.</td><td><i class="fa-github">:github:</i> TBA</td><td>2027</td><td></td></tr><tr><td>P3</td><td><strong>eSignet as an eKYC Verifier</strong>: <br>Allow eSignet itself to act as a reusable eKYC verification service. Support identity verification via web and mobile wallets using OIDC providers.</td><td><i class="fa-github">:github:</i> TBA</td><td>2027</td><td></td></tr><tr><td>P3</td><td><strong>Identity Brokering / Federation</strong>: <br>Enable federation and brokering across multiple identity providers.</td><td><i class="fa-github">:github:</i> TBA</td><td>2027</td><td></td></tr><tr><td>P3</td><td><strong>Multiple Identity Plugin Support</strong>: <br>Support concurrent integration with multiple identity systems via plugins.</td><td><i class="fa-github">:github:</i> TBA</td><td>2027</td><td></td></tr><tr><td>P4</td><td><strong>Digital Signature Support via eSignet</strong>: <br>Enable digital signing services backed by verified identity.</td><td><i class="fa-github">:github:</i> TBA</td><td>2027</td><td></td></tr></tbody></table>

***

**Acronyms and Legends**:

<i class="fa-github">:github:</i> TBA - 'Github Issues Link - To Be Added'