OpenID authentication

典

if you have an OpenID compliant login, my site could allow its users to use those credentials directly with the OpenID compliant web site validating them. They basically handle the login/authentication process and redirect back to the original calling site (my site).

This may sound quite nuts, but it is quite probable that you yourself are already in possession of an OpenID login, as there are many OpenID compliant web sites out there. So it seemed to make sense to allow users to simply use their existing login credentials rather than to ask them to create even more credentials for my

OpenID authentication is now used and provided by several large websites. Providers include AOL, BBC, Facebook, Google, IBM, MySpace, Orange, PayPal, VeriSign, LiveJournal, Yandex, Ustream, and Yahoo!

Does it mean, if you login to freeoz or facebook, zhen come to oursteps, don't need to login again. Because oursteps will pick up your login automatically.
Sounds cool.

http://www.codeproject.com/KB/web-security/OpenIdFormsAuth.aspx

kr2000

discuz!好像有openid的插件，不过不知道够不够成熟

黑山老妖

OpenID idea has been around for a long time.
The only question is how "open" is open ID.

[ 本帖最后由 黑山老妖 于 2011-1-25 10:57 编辑 ]

乱码

我个人觉得openid基本上限于一个公司的多个产品，一家亲，有集中的authentication system,不用对每个产品都开发相同的东西，节省成名本，而且有更好的用户体验。

但对于跨公司的产品，大家不太可能作openid，毕竟把自己的用户交到别人系统去authentication我没有想到有任何益处，而且现在authentication对成型的framework没有任何难度。

Dan.and.Andy

都有私利. 有产品的公司一家牵头谁也做不起来; 靠第三方权威CA来提供,估计厂家又都不尿它

kr2000

方便用户还是正确的趋势
或许有一天，你的产品不支持openid，用户就不要了

Dan.and.Andy

原帖由 kr2000 于 2011-1-25 11:24 发表
方便用户还是正确的趋势
或许有一天，你的产品不支持openid，用户就不要了

先有鸡,还是先有蛋. 如果一个CA有一个好的产品,已经市场占有率很高了,你不得不买它的,或者用它的.但是如果是趋势,就仅仅是趋势了...

乱码

可能那天足迹用google openID，会让我们产生一种错觉：足迹被google收购了！！--->阿斯这下发大了！！！！！　

典

Be honest,
Whenever I search from google, after click into a link, if the link asks me to register or login, I will close it and go to another link.
Maybe oursteps should consider, if a visitor comes from google, this user should be allowed to read the whole topic, or futher more, be allowed to post

黑山老妖

刚才去yahoo试了一下openID。感觉就是它还是要你注册，只不过是从google那里把你的资料import过来而已。

Yonny

OpenID的核心概念就是统一认证，单点登录。

使用了OpenID，你去10个不同的网站，同样都需要注册10次。不过注册时不需要挑选用户名和密码，而是去OpenID服务提供商那里认证。

对于用户来说，好处就是以后上这些网站时，不再需要登录，可以直接发言。因为你之前已经登录了你的Google, Facebook或者QQ。

kr2000

看网站怎么设计的了
有的网站直接取你的openid做个人信息，注册就省了