[OpenID] What are openids weaknesses?

[Johannes Ernst]

On Sep 3, 2007, at 6:07, Peter Williams wrote:
>> For me at least, that's not the point. The point is: what can we  
>> do to
>> make it better? (without changing the low-cost economics)
>
> [Peter Williams] I want to see a plan for OpenID to "harmonize" its
> position with the SAML and the Liberty world, by cooperating with  
> wider
> programs of activity.

Would you like to volunteer? ;-)

> This means changing the marketing messaging of the
> Foundation and advocating practical integration activities that take
> into consideration that it's a multi-protocol world out there.

This implies a bit that none of the sort is happening, which is not  
true. The venue tends to be outside of the OpenID community, or the  
SAML community, or the WS-* community *itself*, but in places that  
are specifically interested in that.

For example:
  - Project Concordia. Last time I checked the OpenID Foundation Vice- 
chair was co-chair of that effort.
  - The OSIS project -- demonstrated successfully multi-vendor  
identity interop in June, will do the same thing again in October  
with a specific focus on CardSpace/WS-*/InformationCards and OpenID  
interop. SAML is on the roadmap as well, but OSIS has seen fewer SAML  
participants than participants with other backgrounds and so the  
agenda gravitates towards where the participants want to go)

There more interesting question is: what is the actual business need,  
exactly? I believe you have actually identified a specific scenario  
for your company / vertical, but there not as many SAML / OpenID  
interop scenarios known as one would think. (Certainly I've heard a  
lot less than I would have thought at first.)

So, just trying to say "no, the sky is not falling" ;-)

Cheers,



Johannes.