[OpenID] dotnetopenid news

Peter Williams pwilliams at rapattoni.com
Wed Jun 17 19:12:36 UTC 2009


We had excellent experience with the dotnetopenid library and samples. Within 2h, a programmer with NO openid background or experience (but lots of websso background) had it working with our site, talking to google. Within 4h, we had learned to use discard the classical UI, and simply use the programming classes to impose our own UI, and talk to yahoo and google OPs via directed ID. We were easily able to invoke our own "resource-STS" processes, where a bit of url routing and token translation allowed us to add local value : such as SAML2 account linking the google pseudonym and invoke RSA Security's semweb business rules engine for trust model enforcement. We were able to also assert to additional RP downstream (via impersonation/delegation, the linked identity). We will play later on with andrew's model .aspx xml template (from his blog site) - that allows one to fashion a custom XRD per user - and see it all work then with openid-delegation.

Is there a set of samples or descriptions that make it easy to showcase the hybrid OAUTH and OpenID work?







More information about the general mailing list