2. supported in core...

3. now what?

4. questions?

5. answers!

6. explanation

7. what is OpenID?

8. “OpenID is an open,
decentralized, free
framework for user-
centric digital
identity.”

9. “OpenID is an open,
decentralized, free
framework for user-
centric digital identity.”

10. what is identity?

11. who you are

12. who am I?

14. “walkah”

15. James Ransom Walker

16. yes... “Ransom”

21. July 10, 1977

22. 29

23. 30

24. over 19

25. over 21

26. over 25

27. under 65

28. who you are

29. how does it work?

30. Who is involved?
• Users - OpenID Identifier
• Relying Party (RP) - aka “consumer”
• Wants your information
• OpenID Provider (OP) - aka “ID
provider”
• Has your information

31. User provides identity
(URL) to Relying Party

32. Relying Party
performs discovery

33. Re-directs to
OpenID Provider

34. ... with choices

35. User authenticates

36. User receives signed
authentication response

37. Redirected to RP

38. Relying party
verifies this
response

39. access granted!

40. what’s the point?

41. too many
usernames &
passwords

42. single sign-on

47. registration
headaches

48. real world

50. photo ID

51. what is an OpenID
identifier?

52. not an account

53. URL

54. globally unique

55. identifier

57. ... like your
passport number

58. isn’t that a bad
idea?

59. what if someone
steals my identity!?

60. “OpenID is an open,
decentralized, free
framework for user-
centric digital
identity.”

61. choice of:
OpenID Provider

62. get a couple!

63. multiple personas

64. choice of:
authentication
method

66. choice of:
released data

67. (including not
presenting ID)

68. user decides

69. where do i get one?

70. how do i use it?

71. is it secure?

72. you don’t give your
credentials to
anyone but your
OpenID provider

73. (unlike
drupal.module)

74. what’s next?

75. OpenID provider

76. DRUPAL-4-7--2

77. 5 & 6 soon!

78. in core?

79. attribute exchange

81. key-value pairs

82. keys are URLs

83. (also globally
unique)

84. http://pants.com/pants/status
=> off

85. not necessarily
from your provider

86. cached by your
provider

87. can be digitally
signed by attribute
provider

88. we can achieve true
digital identity

89. more questions?