Identity management on the web with Open ID

Practical and Open

OpenID is a step in the right direction for identity management. Because OpenID implements single sign-on, it becomes more convenient for users by reducing the number of passwords you need to remember. The ability to manage attributes is far more powerful than it appears at first glance.

The number of websites using OpenID continues to skyrocket, but some really big applications will still need to prove whether they fulfill all of the operative and conceptional requirements with respect to trust and availability.

Identity Management and Federation

OpenID is not the only identity management project. Feder ID [9], for example, is an open source project from France. One of the project's contributors, Clément Oudot, underlined the importance of digital identities for access to web resources in a recent interview with Linux Magazine.

According to Oudot, many users possess a separate identity for each website. This is major issue for large enterprises and organizations, as users need to memorize multiple passwords. Feder ID provides tools for synchronizing identity repositories. These attributes are not only available to a single local organization; they can be shared by trusted partners.

The Feder ID tools are open source licensed and comply with the IETF (Internet Engineering Task Force), OASIS (Organization for the Advancement of Structured Information Standards), and Liberty Alliance standards for identity management.

Infos

  1. Microsoft Passport: http://www.passport.net
  2. Liberty Alliance Project: http://www.projectliberty.org
  3. OpenID project: http://openid.net
  4. Myopenid (provider): http://myopenid.com
  5. Mediawiki extension for OpenID: http://www.mediawiki.org/wiki/Extension:OpenID
  6. Drupal support for OpenID: http://drupal.org/project/openid
  7. Open Source libraries for OpenID: http://wiki.openid.net/Libraries
  8. "Keeping Customers and Merchants Secure", Whitepaper, Secure Computing: http://www.securecomputing.com/webform.cfm?id=289&ref=pci
  9. Feder ID: http://federid.objectweb.org

Buy this article as PDF

Express-Checkout as PDF
Price $2.95
(incl. VAT)

Buy Linux Magazine

SINGLE ISSUES
 
SUBSCRIPTIONS
 
TABLET & SMARTPHONE APPS
Get it on Google Play

US / Canada

Get it on Google Play

UK / Australia

Related content

  • Security Lessons: OpenID

    Outsourcing authentication services gives you access to more services – at a price. Kurt examines the pros and cons of distributed authentication.

  • ArisID: Open Source Development Software for Identity Management

    Software called ArisID should allow developers to write protocol-independent applications that automatically incorporate identity management standards. The overall goal is to protect user data in a dependable and secure manner.

  • Tine 2.0 Now OpenID Provider

    The Web-based groupware suite Tine 2.0 is now available in version 2009/11, code-named August.

  • OSCON 2007

    More than 2500 open source enthusiasts met in Oregon for O'Reilly's annual OSCON convention.

  • Smart Access Intro

    Maybe password security isn't perfect, but most networks depend on it. This month we examine some tools for smarter, more versatile authentication.

comments powered by Disqus

Direct Download

Read full article as PDF:

035-037_openid.pdf  (709.02 kB)

News