<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Simon Willison wrote:
<blockquote
cite="mid:a3b4f3b60707181639m48d6f8abjbed1fec4542e8b91@mail.gmail.com"
type="cite">
<pre wrap="">On 7/18/07, Gábor Farkas <a class="moz-txt-link-rfc2396E" href="mailto:gabor@nekomancer.net"><gabor@nekomancer.net></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">i'm trying to implement a single-signon system for an intranet-solution,
and had the idea that maybe openid would help there.
i understand that it's not what openID is meant for, but i thought it
maybe could work in this situation.
</pre>
</blockquote>
<pre wrap=""><!---->
On the contrary, I think OpenID is ideally suited for this. </pre>
</blockquote>
Exactly! And the only way OpenID should be used currently <span
class="moz-smiley-s5"><span> :-D </span></span> (Sorry for the rant)<br>
<blockquote
cite="mid:a3b4f3b60707181639m48d6f8abjbed1fec4542e8b91@mail.gmail.com"
type="cite">
<pre wrap="">
The method you describe should work fine. I'm hoping that open source
projects that include OpenID support will add settings to make this
kind of thing easier - things like "only accept OpenIDs that match
this pattern" or "glue the entered username on to this URL to create
an OpenID, then use that".</pre>
</blockquote>
It should be pretty easy to simply append the URL always to the
submittion field, which would contain only the user name. Obviously
this would serve a dual purpose, since if somebody would try to enter a
different URL (instead that of your internal IDP) it would land nowhere.<br>
<br>
Example: <br>
<br>
User submits "user" and the script appends .intern.yourdomain.com (the
domain of your IDP server) it will request authorization from the IDP
server, whereas "user.myopenid.com" would result in a failure because
user.myopenid.com.intern.yourdomain.com doesn't exist.<br>
<br>
<div class="moz-signature">-- <br>
<div><font face="Arial" size="2">Regards</font></div>
<div><font face="Arial" size="2"> </font></div>
<div><font face="Arial" size="2">Signer: Eddy Nigg, StartCom Ltd.</font></div>
<div><font face="Arial" size="2">Jabber: <a class="moz-txt-link-abbreviated" href="mailto:startcom@startcom.org">startcom@startcom.org</a></font></div>
<div><font face="Arial" size="2">Phone: +1.213.341.0390</font></div>
</div>
</body>
</html>