<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Yes, I also wonder why the IDP can't just return the ID. As of now I
think it's two steps for this, with the RP explicit requesting it? Or
am I wrong with that?<br>
<br>
James Henstridge wrote:
<blockquote
cite="mid:a7e835d40802011635m6c07bacu1ce6d9d2badb836d@mail.gmail.com"
type="cite">
<pre wrap="">On 02/02/2008, Kevin Turner <a class="moz-txt-link-rfc2396E" href="mailto:kevin@janrain.com"><kevin@janrain.com></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">On Sat, 2008-02-02 at 08:51 +1100, James Henstridge wrote:
</pre>
<blockquote type="cite">
<blockquote type="cite">
<pre wrap="">5. A way for OpenID relying parties to filter out Ops. In a business
scenario, if I run the Sun employee store, I may only want the Sun OP to
talk with me.
</pre>
</blockquote>
<pre wrap="">This is already possible with OpenID 2.0:
</pre>
</blockquote>
<pre wrap="">[snip]
This is already possible with OpenID 1.0:
Perform discovery on the given identifier. Compare the discovered OP
Endpoint to those in your filter. If you do not like what you see, do
not proceed.
</pre>
</blockquote>
<pre wrap=""><!---->
Right. I guess I forgot about that after using directed identity for
a few cases just like this. I'd argue that directed identity with a
fixed OP URL can provide a nicer workflow for these sort of closed
environments though:
1. the RP need not ask for a user name, so all authentication occurs on the OP.
2. If the user is already authenticated to the OP, the user could be
authenticated to the RP without having to enter any input (if
desired).
3. As mentioned earlier, the user does not need to know their
identity URL (or even that they have one) -- they only need ot know
the credentials needed to log into the OP.
</pre>
</blockquote>
<div class="moz-signature">-- <br>
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td colspan="2">Regards </td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, <a href="http://www.startcom.org">StartCom Ltd.</a></td>
</tr>
<tr>
<td>Jabber: </td>
<td><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org">Join the Revolution!</a></td>
</tr>
<tr>
<td>Phone: </td>
<td>+1.213.341.0390</td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
</tbody>
</table>
</div>
</body>
</html>