[OpenID] openid in a non-distributed situation?

[Simon Willison]

On 7/18/07, Gábor Farkas <gabor at nekomancer.net> wrote:
> i'm trying to implement a single-signon system for an intranet-solution,
> and had the idea that maybe openid would help there.
>
> i understand that it's not what openID is meant for, but i thought it
> maybe could work in this situation.

On the contrary, I think OpenID is ideally suited for this. I already
know of one big company who are using OpenID internally in this way,
although I don't think they've made this public knowledge yet.

The method you describe should work fine. I'm hoping that open source
projects that include OpenID support will add settings to make this
kind of thing easier - things like "only accept OpenIDs that match
this pattern" or "glue the entered username on to this URL to create
an OpenID, then use that".

Cheers,

Simon