Openid - an identity system for the open Web
Download as PPT, PDF15 likes1,912 views
OpenID is an open standard that allows users to log in to multiple websites using a single digital identity. It works by allowing users to authenticate through an identity provider of their choice rather than directly with individual service providers. This allows for a consistent user experience across different websites and services. OpenID is used by many major companies and an estimated 250 million identities have been created. It provides a more user-centric approach to digital identity that aligns with trends in the open web.
![Thank you [email_address] ALT-C 2008 Sponsor Session September 2008](https://image.slidesharecdn.com/openidonlinedno2008-1227521791413739-9/85/Openid-an-identity-system-for-the-open-Web-21-320.jpg)
Openid - an identity system for the open Web
- 1. OpenID: An Identity System for the Open Web Online Information, December 2008 September 2008
- 2. OpenID: What is it? Identities: Trusted vs trusted. Activities: Formal vs informal. Usage scenarios. ALT-C 2008 Sponsor Session September 2008
- 3. Uses of online identity Control access to ‘known’ users or subscribers. Depends on claims asserted by trusted party. Personalisation Depends on self-asserted claims by user. Common presence across services. Depends on universal identifier – with consent of user. ALT-C 2008 Sponsor Session September 2008
- 4. Defines globally unique identifiers for users. They're URLs... http://dno.myopenid.com http://openid.eduserv.org.uk/dno ALT-C 2008 Sponsor Session September 2008
- 5. A mechanism to verify the URL ‘belongs to’ its bearer. User chooses provider to hold their profile and check credentials. That's it! Almost. ALT-C 2008 Sponsor Session September 2008
- 6. Who are you? (1) http://dno.myopenid.com OpenID (Identity) Provider (2) (3) Verification + attribute exchange (optional)
- 9. Who's using it? Estimated over 250 million identities! You've probably already got one! ALT-C 2008 Sponsor Session September 2008 BBC AOL Google Yahoo Flickr Microsoft MySpace Orange Verisign
- 10. Shibboleth Credentials ‘owned’ by issuing organisation (eg. University, workplace) . Exist for duration of study, employment etc. Trusted claims. Federations with well-defined boundaries. OpenID Credentials ‘owned’ by user. Exist for sustained period. Untrusted claims. ALT-C 2008 Sponsor Session September 2008
- 11. Learning/research Email Mobile access Collaboration Lifelong-learning/ alumni Shibboleth Managed Information Cards Trust Federations Assessment Subscription resources Campus services Library services Blogging Personalisation OpenID Personal identities Personal Information Cards Social Networks
- 12. OpenID reflects trends of the Open Web.... and those of users and learners. Open content, collaboration, linked-data, RESTful APIs, social software, microformats. ALT-C 2008 Sponsor Session September 2008
- 13. Learners want to use the services they choose, know, and like to use. Provides access to best-of-breed services. Staff want to find the best, and most appropriate services for themselves & students . Campuses can't provide diverse enough set of services. ALT-C 2008 Sponsor Session September 2008
- 14. Scenario 1: Universities issue OpenIDs Easy to do Inferred membership of organisation... http://openid.bath.ac.uk/user Identifier not portable between organisations ALT-C 2008 Sponsor Session September 2008
- 15. Scenario 2: Association of an existing OpenID with a ‘formal’ University identity Also easy to do Lifelong learning Collaboration with peers ‘ Hides’ OpenID from service providers ALT-C 2008 Sponsor Session September 2008
- 16. Scenario 3: Hybrid model: OpenID as a pointer to a formal identity ALT-C 2008 Sponsor Session September 2008
- 18. Service Provider (1) OpenID request http://dno.myopenid.com (4) Formal claims (3) Shibboleth request Informal claims + pointer to ‘formal’ university identity provider (2)
- 19. Conclusions Gives users choice . Fits in with a user-centric, Web 2.0 view of the world. Bridge to a more diverse range of services. Life-long learning identity association. Users can build up personal portfolio of services. Institutional, non-institutional mash-ups. ALT-C 2008 Sponsor Session September 2008
- 20. Considerations It's not a universal solution. Or is it? Good for the techies/Web 2.0 people. Not without risks. Service levels and continuity Data-loss – too much dependency on external services. ALT-C 2008 Sponsor Session September 2008
- 21. Thank you [email_address] ALT-C 2008 Sponsor Session September 2008