<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=Big5" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi Fox,<br>
<br>
I would say that OpenID is probably a poor choice for a deployment like
this. OpenID explicitly avoids the issue of trust - the ability to
ensure that only users that you trust have access to your systems is
something that you would have to figure out yourself, although I
understand that some or all of the OpenID solutions out there have some
measure of 'whitelist' support to control the OPs from which the RPs
would accept authenticated users.<br>
<br>
I would advise you to look at SAML 2.0 for this purpose. SAML 2.0 is
widely supported, both in open source and commercial products. It was
explicitly designed for the use case you describe. Since we are
wandering off-topic for the OpenID list, I'll respond to you personally
with links and more information.<br>
<br>
Cheers,<br>
<br>
Pat<br>
<br>
Francis wrote:
<blockquote cite="mid:710890.29770.qm@web53804.mail.re2.yahoo.com"
type="cite">
<style type="text/css"><!-- DIV {margin:0px;} --></style>
<div
style="font-family: times new roman,new york,times,serif; font-size: 12pt;">
<div>Hello,</div>
<div> </div>
<div>My company has many partners/customers and we want to build a
single logon system for them for some kind distributed web apps (under
different domains).</div>
<div> </div>
<div>We don't want to re-invent the wheel and we want high quality
implmentation (i.e. distributed, high performance, security).</div>
<div> </div>
<div>So I have found OpenID seems to be a good reference for my
purpose.</div>
<div> </div>
<div>What is your comments about my purpose? Should I use other
products/tools for my purpose instead of OpenId?</div>
<div> </div>
<div>Any comments are welcome.</div>
<div> </div>
<div>Thanks.</div>
<div> </div>
<div>Fox</div>
<div> </div>
<div> </div>
<div> </div>
</div>
<br>
<hr size="1">使用Y!Mail，給你重重驚喜，更有機會贏 <b>MacBook</b>! <b>立即參加</b>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
general mailing list
<a class="moz-txt-link-abbreviated" href="mailto:general@openid.net">general@openid.net</a>
<a class="moz-txt-link-freetext" href="http://openid.net/mailman/listinfo/general">http://openid.net/mailman/listinfo/general</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Pat Patterson - <a class="moz-txt-link-abbreviated" href="mailto:pat.patterson@sun.com">pat.patterson@sun.com</a>
Federation Architect,
Sun Microsystems, Inc.
<a class="moz-txt-link-freetext" href="http://blogs.sun.com/superpat">http://blogs.sun.com/superpat</a>
</pre>
</body>
</html>