Account attribute push

[Manuel Lemos]

Hello Andrew,

on 04/19/2010 06:31 AM Andrew Arnott said the following:
> Hi Manuel,
> 
> AX has RP to OP push, and OP to RP update, allowing the chain reaction
> that you describe.

Really? Is that in the 1.0 AX spec or is there a newer version? Reading
it it seems that all is initiated by an RP, so the OP has no way of
letting RPs know about updated attributes, or am I getting it wrong?


> However, no OP or RP to my knowledge implements this part of the spec. 
> So unless you're planning to own or control all of the sites involved,
> it's too soon to achieve what you're describing.

No problem I am implementing 100% of the specs in PHP for my own sites
using OpenID. If all goes well I may even release the code as Open
Source, but first I need to figure out how to solve these problems with
the existing spec versions.

> 
 --
> Andrew Arnott
> "I [may] not agree with what you have to say, but I'll defend to the
> death your right to say it." - S. G. Tallentyre
> 
> 
> On Mon, Apr 19, 2010 at 4:30 AM, Manuel Lemos <mlemos at acm.org
> <mailto:mlemos at acm.org>> wrote:
> 
>     Hello,
> 
>     Please excuse me if this subject is not appropriate for this list.
> 
>     Looking at the available specs I could not figure if a certain feature
>     that I am interested is supported by any of the OpenID specs or any
>     extension that is in progress.
> 
>     I am working on an implementation on which the OpenID provider not only
>     can authenticate an account, but also centralizes e-mail addresses and
>     aother account attributes of all accounts.
> 
>     The problem that I need to solve is the need for the consumer sites to
>     have the account e-mail addresses updated, as those sites send several
>     types of newsletters specific of the sites.
> 
>     So, if an user updates the account e-mail address in one consumer site,
>     I need a) the e-mail address to be pushed in realtime to the
>     authentication provider and b) the authentication provider pushes the
>     updated account e-mail addresses to any other consumers that are using
>     the same user account without having to wait for the user to login in
>     those sites.
> 
>     It seems that OpenID Attribute Exchange spec handles a) but interaction
>     needs to depart from consumer sites. So, b) does not seem to be handled
>     by AX. Am I correct? If that is the case, is there any other spec,
>     published or being worked on, that handles b), i.e push account
>     attribute updates from the provider to any relevant consumers?



-- 

Regards,
Manuel Lemos

Find and post PHP jobs
http://www.phpclasses.org/jobs/

PHP Classes - Free ready to use OOP components written in PHP
http://www.phpclasses.org/