Authorization using OpenID?

Jonathan Daugherty cygnus at janrain.com
Fri Oct 13 16:16:03 UTC 2006


# With our company we would like to use OpenID to enable users to use
# several applications with a signle sign on mechanism (like
# OpenID). But not every user may use every application so we need
# some authorization mechanism to distinguish the users who may from
# those who may not. Is that something OpenID can do or help to do?

As you already pointed out, OpenID is for authentication.  You can
easily build your own is-this-OpenID-in-that-list authorization
mechanism for your application; OpenID alone cannot do this.

-- 
  Jonathan Daugherty
  JanRain, Inc.



More information about the general mailing list