[OpenID] query regarding OP migration

Nate Klingenstein ndk at internet2.edu
Fri May 30 15:02:37 UTC 2008


Babu,

The short answer: "yes, but."  It is possible to address this use  
case with delegation.  It's a good feature but may be too advanced  
for some users.  It's certainly not standard practice.  This Wiki  
article might help:

http://wiki.openid.net/Delegation

Remember that this needs to be part of the initial setup.  This is  
because once the RP has cached an identifier associated with an  
account, it's difficult to reconfigure that link.  That OpenID is  
your login.  How do you prove that a different OpenID is the correct  
new identifier?  Unless your old, unloved provider is willing to  
help, manual reconciliation is the only way, in many cases, and  
that's a really expensive and difficult process.

Take care,
Nate.

On 30 May 2008, at 13:52, Babu.N wrote:

> Hi,
>
> As I understand, OpenID allows a digital identity to be created at an
> OP & let this be used at multiple sites. After creating the digital
> identify & using it some websites, suppose the doesn't like the OP
> for service reasons (say frequent downtime, prone to compromises
> etc). Does OpenID technology allow the user to migrate from this OP
> to another, yet retaining the same identity (remember this is already
> used by him in registering at some websites..) ? If not, should this
> not be supported going forward ?
>
>
> Thanks,
> Babu

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20080530/f6c0bd26/attachment-0002.htm>


More information about the general mailing list