<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2769" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff><FONT face=Arial size=2>
<DIV>Hi,</DIV>
<DIV><BR>The web service we've been building currently supports<BR>OpenID
inasmuch as we act as an identity provider.</DIV>
<DIV> </DIV>
<DIV>I was thinking about leveraging the schtuff.com service as a<BR>support
wiki for our users.</DIV>
<DIV> </DIV>
<DIV>So, they click on a 'support wiki' link on our site and<BR>are taken to our
schtuff.com wikispace, now since our users<BR>may not know that their identity
with us is an openid and can<BR>be used to login to schtuff, especially since
their identity<BR>is say 'john' and their openid is <A
href="http://www.ourservice.com/users/john">http://www.ourservice.com/users/john</A></DIV>
<DIV> </DIV>
<DIV>I thought it might be useful to provide a mechanism by which<BR>an identity
provider can link to an openid consumer and let them know <BR>who is calling so
the consumers can be smart about 'filling in their openid' for <BR>them and
allow them to login more easily. They(the end-users) of course would<BR>still be
in control.</DIV>
<DIV> </DIV>
<DIV>In other words, think of this as a 'consumer driven idp affiliate
program'</DIV>
<DIV> </DIV>
<DIV>So consumers could build a whitelist of participating servers from<BR>whom
they accept referred users. In other words, the user is already<BR>autheticated
at the server and the server domain is referring the<BR>user to the consumer and
the consumer has previously whitelisted this<BR>server so 'john' has a smooth
and seamless experience.</DIV>
<DIV> </DIV>
<DIV>So, a consumer that receives a request from an idp affiliate where
the</DIV>
<DIV>HTTP_REFERRER is from an ourservice.com domain and the</DIV>
<DIV>request is of the type</DIV>
<DIV><A
href="http://ourservice.schtuff.com?caller_id=http://www.ourservice.com/users/john">http://ourservice.schtuff.com?caller_id=http://www.ourservice.com/users/john</A></DIV>
<DIV>could automatically do the needful.</DIV>
<DIV> </DIV>
<DIV>Thoughts<BR>S. Sriram<BR></FONT></DIV></BODY></HTML>