<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Techie-Gyan &#187; OpenID</title>
	<atom:link href="http://www.techiegyan.com/category/openid/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.techiegyan.com</link>
	<description></description>
	<lastBuildDate>Fri, 25 Nov 2011 05:37:37 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>What is OpenID?</title>
		<link>http://www.techiegyan.com/2008/02/13/what-is-openid/</link>
		<comments>http://www.techiegyan.com/2008/02/13/what-is-openid/#comments</comments>
		<pubDate>Wed, 13 Feb 2008 15:01:00 +0000</pubDate>
		<dc:creator>Aditya</dc:creator>
				<category><![CDATA[authentication]]></category>
		<category><![CDATA[identity]]></category>
		<category><![CDATA[OpenID]]></category>
		<category><![CDATA[web]]></category>

		<guid isPermaLink="false">http://www.techiegyan.com/?p=11</guid>
		<description><![CDATA[Problem: Every web site comes with its registration procedure. So before even trying a new website you have to fill a form, confirm your email address and then start. And this is actually a major reason for people to not to try a new website. Design guidelines are getting liberal about the user information at [...]]]></description>
			<content:encoded><![CDATA[<p><span style="font-weight: bold;">Problem: </span>Every web site comes with its registration procedure. So before even trying a new website you have to fill a form, confirm your email address and then start. And this is actually a major reason for people to not to try a new website. Design guidelines are getting liberal about the user information at the time of registration and trying hard to reduce the pain of user.</p>
<p>But again every body has to remember their multiple identities which are spread on wide web.</p>
<p><span style="font-weight: bold;">OpenID: </span>OpenID is decentralized single-sign-on system. On OpenID enabled websites users do not need to remember authentication tokens like username,email and passwords but provide their OpenId. Meaning of decentralization is that there is no one authority which is responsible for OpenID.</p>
<p>It is an open standard which any body can implement and support. You can go through specs <a href="http://openid.net/developers/specs/">here.</a></p>
<p>For using OpenID, you need to get registered with one of the websites which is acting as an OpenID provider and then you can use your OpenID on websites which support it.</p>
<p>I know it is not easy to understand in one go, so lets take step by step.</p>
<p><span style="font-weight: bold;">1. Where i need to register for getting my OpenID?</span> &#8211; There are several websites which acts as OpenID provider but for simplicity I am listing some of them:</p>
<p>a. AOL<br />b. LiveDoor<br />c. LiverJournal<br />d. Orange<br />e. SmugMug<br />f. Technorati<br />g. Vox<br />h. WordPress.com<br />i. Yahoo</p>
<p>If you have account with any of the above,then congratulations, you have an OpenID.</p>
<p><span style="font-weight: bold;">2. What is an OpenID? Suppose I have an account with WordPress then what is my OpenID?</span> &#8211; OpenID can be of two types i mean it can have two formats a. URL b. <a href="http://en.wikipedia.org/wiki/XRI">XRI</a></p>
<p>Now let me first answer the question and then elaborate more. If you have an account with WordPress.com your OpenID will be <strong style="font-weight: bold;">username</strong><span style="font-weight: bold;">.wordpress.com</span>. There are different formats for different OpenID providers and details can be seen at <a href="http://openid.net/get/">OpenID w</a><a href="http://openid.net/get/">ebsite.</a></p>
<p>URL can be of two types:</p>
<p>a. you can use an existing URL under your own control as OpenID  by inserting appropriate OpenID tags in  HTML pages by following OpenID specifications.<br />b.You can register with an OpenID provider and get your OpenID.</p>
<p>Now what is this <a href="http://en.wikipedia.org/wiki/XRI">XRI</a>? This is basically a new type of Internet Identifier for cross domain digital identity. I am also not very much aware about this yet, but will definitely post details about the same, for now lets skip it.</p>
<p><span style="font-weight: bold;">3. OK. Now i have my OpenID. But who will support it? how/where can i use it?</span> &#8211; There are several websites which take OpenID for authentication, I will take an example later in this post to  clarify more. You can visit <a href="https://www.myopenid.com/directory">directory</a> of sites where you can use your OpenID</p>
<p><span style="font-weight: bold;">4. How does this work ? what happens behind the scenes when i provide my OpenID to a website which supports it?</span> &#8211; Good question.  When you provide your OpenID to a website (e.g. abc.com), for authentication, it goes to the OpenID provider (e.g. xyz.com), specified by you, and checks whether the you are logged-in  at xyz.com from the same machine or not.</p>
<p>a. If you are, it redirects the request to xyz.com to get confirmation from you that:</p>
<p>i. abc.com is trying to authenticate and asking some information from xyz.com<br />ii. should xyz.com trust abc.com with your identity or not?</p>
<p>Once you confirm, it will log you in abc.com.</p>
<p>b. If you are not online, It will ask you to be online on xyz.com first and then proceed.</p>
<p>In this way nobody who is having your OpenID can log into some website on your behalf because it requires you to be logged in on same machine.</p>
<p><span style="font-weight: bold;">5. OK. give me an example.</span> &#8211; Lets take a very simple one. You need to be logged-in while posting a comment on blogs of blogger.com.  blogger.com also supports openID. So we will try to post a comment using OpenID and will use WordPress.com as OpenID provider.</p>
<p>a. Login at wordpress.com<br />b. Go to blogger.com(in seperate tab of your browser)<br />c. Pick any blog which allows comments<br />d. When you go to post a comment you get following</p>
<p><a href="http://picasaweb.google.co.in/aditya02.c/Techigyan/photo#5167222175105620530"><img src="http://lh3.google.co.in/aditya02.c/R7WpMO6xGjI/AAAAAAAAACg/60u71tHG280/s400/scrshot.JPG" /></a></p>
<p>e. Provide your OpenID, fill comments and publish your comment.<br />f. it will take you to wordpress.com for confirmation.</p>
<p><a href="http://picasaweb.google.co.in/aditya02.c/Techigyan/photo#5167222196580457026"><img src="http://lh4.google.co.in/aditya02.c/R7WpNe6xGkI/AAAAAAAAACs/J2Yb3WpKHDM/s400/scrshot1.JPG" /></a></p>
<p>g. confirm the request and your comments will be published (if comments moderation is not applied on that blog)</p>
<p>Now log out from wordpress.com and try same thing again. It will ask for the login to proceed.</p>
<div></div>
]]></content:encoded>
			<wfw:commentRss>http://www.techiegyan.com/2008/02/13/what-is-openid/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

