<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Arial; font-size: 12pt; color: #000000'><div style="font-size: 12pt; "></div><div><font class="Apple-style-span" size="2">About 6 weeks ago a proposal for a new OpenID working group was submitted (see thread below) that would focus on the account chooser concept. That proposal was accepted, and t</font><span class="Apple-style-span" style="font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Verdana, sans-serif; background-color: rgb(255, 255, 255); ">here is now a</span><span class="Apple-style-span" style="font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Verdana, sans-serif; background-color: rgb(255, 255, 255); "> </span><a href="http://groups.google.com/group/oidf-account-chooser-list" target="_blank" style="font-size: 13px; font-family: Arial, Verdana, sans-serif; background-color: rgb(255, 255, 255); color: rgb(17, 85, 204); ">mailing list for the working group</a><span class="Apple-style-span" style="font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Verdana, sans-serif; background-color: rgb(255, 255, 255); ">, as well as</span><span class="Apple-style-span" style="font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Verdana, sans-serif; background-color: rgb(255, 255, 255); "> </span><a href="https://sites.google.com/site/oidfacwg/home" target="_blank" style="font-size: 13px; font-family: Arial, Verdana, sans-serif; background-color: rgb(255, 255, 255); color: rgb(17, 85, 204); ">a site to post content from the working group</a><span class="Apple-style-span" style="font-size: 13px; color: rgb(34, 34, 34); font-family: Arial, Verdana, sans-serif; background-color: rgb(255, 255, 255); ">.</span></div><div style="font-size: 12pt; "><blockquote style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px; background-color: rgba(255, 255, 255, 0.917969); margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 40px; border-top-style: none; border-right-style: none; border-bottom-style: none; border-left-style: none; border-width: initial; border-color: initial; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; "><div><div style="font-family: Arial, Verdana, sans-serif; background-color: rgb(255, 255, 255); ">If you care about why it took so long, there were two main reasons. First, there is a generic <a href="https://sites.google.com/site/oauthgoog/mlistsdkim" target="_blank" style="color: rgb(17, 85, 204); ">really bad problem</a> with posts to OIDF mailing lists being incorrectly marked as SPAM. That is why this message is being sent from a general mail account I setup instead of my regular email account. I've spent weeks trying to find a way to eliminate that problem, but had to give up for now. Instead for this working group I setup a mailing list on Google Groups. Hopefully in 2012 this false positive problem will be resolved and we can go back to an OIDF hosted mailing list. Second, I've been working with the OIDF's team from Inventures to transfer ownership of the <a href="http://accountchooser.com/org/net" target="_blank" style="color: rgb(17, 85, 204); ">accountchooser.com/org/net</a> domains names. That only got resolved on Monday after weeks of dealing with domain registrars.</div></div></blockquote><div style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px; background-color: rgba(255, 255, 255, 0.917969); "><div style="font-family: Arial, Verdana, sans-serif; background-color: rgb(255, 255, 255); "><br></div><div style="font-family: Arial, Verdana, sans-serif; background-color: rgb(255, 255, 255); ">I hope that many of you will be at IIW this week. I plan to run at least one session about the account chooser. In addition, Naveen Agarwal is going to lead another session on the next potential evolution of an account chooser that would store a list of accounts for the browser, as opposed to for an individual website. We have some techniques to propose for how to do that with an unmodified, but more recent browser, while still providing strong privacy/security controls.</div><div style="font-family: Arial, Verdana, sans-serif; background-color: rgb(255, 255, 255); "><br></div><div style="font-family: Arial, Verdana, sans-serif; background-color: rgb(255, 255, 255); ">Whether or not you are at IIW, I hope you will consider monitoring or joining the discussion on this account chooser concept. If you do decide to join, make sure to review the <a href="http://wiki.openid.net/w/page/12995249/Working%20Groups">OIDF's IPR policy and execute a contribution agreement</a>.</div><div style="font-family: Arial, Verdana, sans-serif; background-color: rgb(255, 255, 255); "><br></div></div></div><div style="font-size: 12pt; "><div style="font-family: arial; font-size: small; "><div>-- <br><div style="line-height: 1.5em; padding-top: 10px; margin-top: 10px; color: rgb(85, 85, 85); font-family: sans-serif; "><span style="border-top-width: 2px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(213, 15, 37); border-right-color: rgb(213, 15, 37); border-bottom-color: rgb(213, 15, 37); border-left-color: rgb(213, 15, 37); padding-top: 2px; margin-top: 2px; ">Eric Sachs |</span><span style="border-top-width: 2px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(51, 105, 232); border-right-color: rgb(51, 105, 232); border-bottom-color: rgb(51, 105, 232); border-left-color: rgb(51, 105, 232); padding-top: 2px; margin-top: 2px; "> Senior Product Manager |</span><span style="border-top-width: 2px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(0, 153, 57); border-right-color: rgb(0, 153, 57); border-bottom-color: rgb(0, 153, 57); border-left-color: rgb(0, 153, 57); padding-top: 2px; margin-top: 2px; "> <a href="mailto:esachs@google.com" target="_blank">esachs@google.com</a> </span></div></div><div><span style="border-top-width: 2px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(0, 153, 57); border-right-color: rgb(0, 153, 57); border-bottom-color: rgb(0, 153, 57); border-left-color: rgb(0, 153, 57); padding-top: 2px; margin-top: 2px; "><br></span></div><br><div class="gmail_quote">---------- Forwarded message ----------<br>From: <b class="gmail_sendername">Eric Sachs</b> <span dir="ltr"><<a href="mailto:esachs@google.com" target="_blank">esachs@google.com</a>></span><br>Date: Mon, Aug 29, 2011 at 10:47 AM<br>Subject: Account Chooser working group charter submission<br>To: <a href="mailto:openid-general@lists.openid.net" target="_blank">openid-general@lists.openid.<wbr>net</a><br><br><br><div style="font-family: 'Times New Roman'; background-color: transparent; "><span style="font-family: Arial; background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; ">At the last few </span><a href="http://www.internetidentityworkshop.com/" target="_blank"><span style="font-family: Arial; color: rgb(0, 0, 153); background-color: transparent; vertical-align: baseline; white-space: pre-wrap; ">Internet Identity Workshops</span></a><span style="font-family: Arial; background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; "> there have been discussions about building a “cloud based” identity selector. The idea has been to mix the user experience advantages of Information Cards, the popularity of consumer identity providers, and still support large numbers of identity providers as InCommon has done. The end result is a user experience that is being called an “</span><a href="http://accountchooser.com/" target="_blank"><span style="font-family: Arial; color: rgb(0, 0, 153); background-color: transparent; vertical-align: baseline; white-space: pre-wrap; ">Account Chooser</span></a><span style="font-family: Arial; background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; ">.”</span><br><span style="font-family: Arial; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; background-color: transparent; "></span><br><span style="font-family: Arial; background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; ">A </span><a href="https://sites.google.com/site/oauthgoog/workinggroupcharter" target="_blank"><span style="font-family: Arial; color: rgb(0, 0, 153); background-color: transparent; vertical-align: baseline; white-space: pre-wrap; ">charter for a new account chooser working group</span></a><span style="font-family: Arial; background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; "> was submitted today for review by the specs council. We plan to discuss it in more detail at the </span><a href="http://openid.net/oidf-summits/" target="_blank"><span style="font-family: Arial; color: rgb(0, 0, 153); background-color: transparent; vertical-align: baseline; white-space: pre-wrap; ">upcoming September 12/13 OpenID Summit</span></a><span style="font-family: Arial; background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; "> hosted by Microsoft in Mountain View, CA.</span></div><div style="background-color: transparent; "><font face="Arial"><span style="white-space: pre-wrap; "><br></span></font></div><div style="background-color: transparent; "><span style="font-family: Arial; white-space: pre-wrap; ">The end goal of this account chooser technique is to make the sign-in process as simple as a user clicking their picture from a list of accounts they frequently use on a website.</span></div><div style="background-color: transparent; "><span style="font-family: Arial; white-space: pre-wrap; "><br></span></div><div style="background-color: transparent; "><font face="Arial"><span style="white-space: pre-wrap; "><img src="https://mail.google.com/mail/u/0/?ui=2&ik=07321caa5b&view=att&th=133141a9ba63b216&attid=0.2&disp=emb&realattid=ii_132169fed7d564c6&zw" alt="greenAC.png" title="greenAC.png"><br>
</span></font></div><div style="background-color: transparent; "><font face="Arial"><span style="white-space: pre-wrap; "><br></span></font></div><div style="background-color: transparent; "><font face="Arial"><div style="background-color: transparent; "><span style="white-space: pre-wrap; ">For example, Bonnie is on her mobile phone and wants to login to a website. She is shown a list of accounts including her personal account, her work account, and an entry for her husband who sometimes borrows her phone. She simply clicks the account she wants to use.</span></div><div style="background-color: transparent; "><span style="white-space: pre-wrap; "><br></span></div><div style="background-color: transparent; "><span style="white-space: pre-wrap; ">If she had a new phone, or computer, she would need to add those accounts to the device, so she would see a screen like the one below where she could click her identity provider if it was listed. If not, she can simply type her email address. If there is a known identity provider for that email address, she will be redirected to it, otherwise she will be asked for her password on this site.</span></div><div style="background-color: transparent; "><span style="white-space: pre-wrap; "><br></span></div><div style="background-color: transparent; "><span style="white-space: pre-wrap; "><img src="https://mail.google.com/mail/u/0/?ui=2&ik=07321caa5b&view=att&th=133141a9ba63b216&attid=0.1&disp=emb&realattid=ii_13216a012a1ca1b5&zw" alt="greenadd.png" title="greenadd.png"><br>
</span></div><div style="background-color: transparent; "><span style="white-space: pre-wrap; "><br></span></div></font><br></div><div style="background-color: transparent; "><br></div><span style="font-family: 'Times New Roman'; "><div style="background-color: transparent; "><span style="font-family: Arial; background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; ">In preparation for the upcoming </span><span style="font-family: Arial; color: rgb(0, 0, 153); background-color: transparent; text-decoration: underline; vertical-align: baseline; white-space: pre-wrap; "><a href="http://openid.net/oidf-summits/" target="_blank">OpenID Summit</a></span><span style="font-family: Arial; background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; "> we have started to build the </span><a href="http://accountchooser.com/" target="_blank"><span style="font-family: Arial; color: rgb(0, 0, 153); background-color: transparent; vertical-align: baseline; white-space: pre-wrap; ">accountchooser.com</span></a><span style="font-family: Arial; background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; "> website with an overview of this user experience, as well as an initial implementor’s guide. A new mailing list will be created by this working group for further discussion once the spec council gives their approval.</span></div></span><div style="background-color: transparent; "><span style="font-family: Arial; color: rgb(51, 51, 51); background-color: rgb(255, 255, 255); text-decoration: none; vertical-align: baseline; white-space: pre-wrap; "></span><br><span style="font-family: Arial; background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; ">There are a few websites where you can currently experiment with an account chooser:</span><ul style="font-family: 'Times New Roman'; "><li style="list-style-type: disc; font-family: Arial; background-color: transparent; text-decoration: none; vertical-align: baseline; "><span style="background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; ">Google now provides the option to </span><a href="https://sites.google.com/site/gitooldocs/experiment---account-chooser" target="_blank"><span style="color: rgb(0, 0, 153); background-color: transparent; vertical-align: baseline; white-space: pre-wrap; ">opt-in to using an account chooser</span></a><span style="background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; "> instead of Google’s traditional email/password based login box</span></li><li style="list-style-type: disc; font-family: Arial; background-color: transparent; text-decoration: none; vertical-align: baseline; "><span style="background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; ">There is also </span><a href="https://account-chooser.appspot.com/" target="_blank"><span style="color: rgb(0, 0, 153); background-color: transparent; vertical-align: baseline; white-space: pre-wrap; ">a test site</span></a><span style="background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; "> which lets you manually reconfigure your account after you login</span></li><li style="list-style-type: disc; font-family: Arial; background-color: transparent; text-decoration: none; vertical-align: baseline; "><span style="background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; ">A </span><a href="http://openidsamplestore.com/basic/" target="_blank"><span style="color: rgb(0, 0, 153); background-color: transparent; vertical-align: baseline; white-space: pre-wrap; ">sample e-commerce site</span></a><span style="background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; "> is also available that uses an account chooser (though it is under construction this week, so it may be unstable)</span></li></ul><span style="font-family: Arial; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; background-color: transparent; "></span><span style="font-family: Arial; background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; ">There are multiple ways to deploy an account chooser. The quickest option is generally to use a SaaS vendor who provides an account chooser as well as integration with popular identity providers. Current SaaS vendors in this category include the </span><a href="http://code.google.com/apis/identitytoolkit/" target="_blank" style="font-family: 'Times New Roman'; "><span style="font-family: Arial; color: rgb(0, 0, 153); background-color: transparent; vertical-align: baseline; white-space: pre-wrap; ">Google Identity Toolkit</span></a><span style="font-family: Arial; background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; "> and </span><a href="http://www.janrain.com/products/login-helper" target="_blank" style="font-family: 'Times New Roman'; "><span style="font-family: Arial; color: rgb(0, 0, 153); background-color: transparent; vertical-align: baseline; white-space: pre-wrap; ">Janrain Login Helper</span></a><span style="font-family: Arial; background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; ">. Another option is to use a JavaScript widget that implements an account chooser, but then operate your own server side logic to integrate with identity providers. It is possible to use the </span><a href="http://code.google.com/apis/identitytoolkit/" target="_blank" style="font-family: 'Times New Roman'; "><span style="font-family: Arial; color: rgb(0, 0, 153); background-color: transparent; vertical-align: baseline; white-space: pre-wrap; ">Google Identity Toolkit</span></a><span style="font-family: Arial; background-color: transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; "> in this mode, and other vendors may provide similar widgets in the future.</span></div><div><font class="Apple-style-span" color="#888888"><br></font></div></div>-- <br><div style="line-height: 1.5em; padding-top: 10px; margin-top: 10px; color: rgb(85, 85, 85); font-family: sans-serif; "><span style="border-top-width: 2px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(213, 15, 37); border-right-color: rgb(213, 15, 37); border-bottom-color: rgb(213, 15, 37); border-left-color: rgb(213, 15, 37); padding-top: 2px; margin-top: 2px; ">Eric Sachs |</span><span style="border-top-width: 2px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(51, 105, 232); border-right-color: rgb(51, 105, 232); border-bottom-color: rgb(51, 105, 232); border-left-color: rgb(51, 105, 232); padding-top: 2px; margin-top: 2px; "> Senior Product Manager |</span><span style="border-top-width: 2px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(0, 153, 57); border-right-color: rgb(0, 153, 57); border-bottom-color: rgb(0, 153, 57); border-left-color: rgb(0, 153, 57); padding-top: 2px; margin-top: 2px; "> <a href="mailto:esachs@google.com" target="_blank">esachs@google.com</a> </span></div><div><span style="border-top-width: 2px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(0, 153, 57); border-right-color: rgb(0, 153, 57); border-bottom-color: rgb(0, 153, 57); border-left-color: rgb(0, 153, 57); padding-top: 2px; margin-top: 2px; "><br></span></div></div></div></div></body></html>