Take a look at Google's FedCM protocol as well