<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi Johannes,<br>
<br>
Johannes Ernst wrote:
<blockquote cite="mid:47DDEA39-6CF7-489C-896B-CD56A482BAF3@netmesh.us"
type="cite">You know of course, Pat, that virtually all members of
this list would disagree with you on your assessment of "poor choice".
Flame bait! ;-)
<div><br class="khtml-block-placeholder">
</div>
<div>I'd think it would be an excellent choice. As Pat points out,
not the only choice, but certainly a viable one.</div>
</blockquote>
Our opinions differ. It would be a dull world if everyone agreed on
everything :-)<br>
<blockquote cite="mid:47DDEA39-6CF7-489C-896B-CD56A482BAF3@netmesh.us"
type="cite">
<div>Traditionally this list hasn't been used to discuss particular
product choices, however.</div>
</blockquote>
Indeed - I've taken such discussion offlist.<br>
<br>
Cheers,<br>
<br>
Pat<br>
<blockquote cite="mid:47DDEA39-6CF7-489C-896B-CD56A482BAF3@netmesh.us"
type="cite">
<div>
<div>On Sep 7, 2007, at 9:57, Pat Patterson wrote:
<div><br class="Apple-interchange-newline">
<blockquote type="cite"> Hi Fox,<br>
<br>
I would say that OpenID is probably a poor choice for a deployment like
this. OpenID explicitly avoids the issue of trust - the ability to
ensure that only users that you trust have access to your systems is
something that you would have to figure out yourself, although I
understand that some or all of the OpenID solutions out there have some
measure of 'whitelist' support to control the OPs from which the RPs
would accept authenticated users.<br>
<br>
I would advise you to look at SAML 2.0 for this purpose. SAML 2.0 is
widely supported, both in open source and commercial products. It was
explicitly designed for the use case you describe. Since we are
wandering off-topic for the OpenID list, I'll respond to you personally
with links and more information.<br>
<br>
Cheers,<br>
<br>
Pat<br>
<br>
Francis wrote:
<blockquote cite="mid:710890.29770.qm@web53804.mail.re2.yahoo.com"
type="cite">
<div
style="font-family: times new roman,new york,times,serif; font-size: 12pt;">
<div>Hello,</div>
<div> </div>
<div>My company has many partners/customers and we want to build
a single logon system for them for some kind distributed web apps
(under different domains).</div>
<div> </div>
<div>We don't want to re-invent the wheel and we want high
quality implmentation (i.e. distributed, high performance, security).</div>
<div> </div>
<div>So I have found OpenID seems to be a good reference for my
purpose.</div>
<div> </div>
<div>What is your comments about my purpose? Should I use other
products/tools for my purpose instead of OpenId?</div>
<div> </div>
<div>Any comments are welcome.</div>
<div> </div>
<div>Thanks.</div>
<div> </div>
<div>Fox</div>
<div> </div>
<div> </div>
<div> </div>
</div>
<br>
<hr size="1">使用Y!Mail，給你重重驚喜，更有機會贏 <b>MacBook</b>! <b>立即參加</b>
<pre wrap=""><hr size="4" width="90%">_______________________________________________
general mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated"
href="mailto:general@openid.net">general@openid.net</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://openid.net/mailman/listinfo/general">http://openid.net/mailman/listinfo/general</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Pat Patterson - <a moz-do-not-send="true"
class="moz-txt-link-abbreviated" href="mailto:pat.patterson@sun.com">pat.patterson@sun.com</a>
Federation Architect,
Sun Microsystems, Inc.
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://blogs.sun.com/superpat">http://blogs.sun.com/superpat</a>
</pre>
<div style="margin: 0px;">_______________________________________________</div>
<div style="margin: 0px;">general mailing list</div>
<div style="margin: 0px;"><a moz-do-not-send="true"
href="mailto:general@openid.net">general@openid.net</a></div>
<div style="margin: 0px;"><a moz-do-not-send="true"
href="http://openid.net/mailman/listinfo/general">http://openid.net/mailman/listinfo/general</a></div>
</blockquote>
</div>
<br>
</div>
</div>
<br>
<br>
<div> <span class="Apple-style-span"
style="border-collapse: separate; border-spacing: 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px;"><span
class="Apple-style-span"
style="border-collapse: separate; border-spacing: 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px;">
<div style="margin: 0px;">Johannes Ernst</div>
<div style="margin: 0px;">NetMesh Inc.</div>
<div><br class="khtml-block-placeholder">
</div>
<br class="Apple-interchange-newline">
</span><span></span><span></span><span><img
src="cid:part1.05000904.03090100@sun.com"></span><span><img
src="cid:part2.02010104.06030205@sun.com"></span><span
class="Apple-style-span"
style="border-collapse: separate; border-spacing: 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px;"><span
class="Apple-style-span"
style="border-collapse: separate; border-spacing: 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px;"> <a
moz-do-not-send="true" href="http://netmesh.info/jernst">http://netmesh.info/jernst</a><br
class="Apple-interchange-newline">
</span></span> </span></div>
<br>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
general mailing list
<a class="moz-txt-link-abbreviated" href="mailto:general@openid.net">general@openid.net</a>
<a class="moz-txt-link-freetext" href="http://openid.net/mailman/listinfo/general">http://openid.net/mailman/listinfo/general</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Pat Patterson - <a class="moz-txt-link-abbreviated" href="mailto:pat.patterson@sun.com">pat.patterson@sun.com</a>
Federation Architect,
Sun Microsystems, Inc.
<a class="moz-txt-link-freetext" href="http://blogs.sun.com/superpat">http://blogs.sun.com/superpat</a>
</pre>
</body>
</html>