April 10, 2012 OpenID Connect Update Release
The OpenID Connect working group has released an update to the OpenID Connect specifications that continues incorporating significant developer feedback received, while maintaining as much compatibility with the implementer’s drafts as possible. The Connect specs have also been updated to track updates to the OAuth and JOSE specs, which they use. The primary normative changes...
OpenID Connect Interop in Progress
The Third OpenID Connect Interop is currently under way – this time based upon approved Implementer’s Drafts. Currently 7 implementations are being tested, with I believe more to be added. The interop is designed to enable people to test the implementations they’ve built against other implementations and verify that specific features that they’ve built are...
OpenID Connect Implementer’s Drafts Approved
The OpenID Foundation members have overwhelmingly voted to approve the OpenID Connect specifications as Implementer’s Drafts. This is an important milestone in the process of completing the OpenID Connect specifications. Implementer’s Drafts are stable versions of specifications intended for trial implementations and deployments that provide specific IPR protections to those using them. Implementers and deployers...
Greg Keegstra and Axel Nennker Elected to OpenID Board
My congratulations to Greg Keegstra and Axel Nennker for their election to the OpenID Board of Directors. Greg brings strong marketing chops and his can-do spirit to the board. Axel returns with his mix of deep technical expertise and common sense. ...
Vote to Approve OpenID Connect Implementer’s Drafts Under Way
The vote to approve six OpenID Connect specification drafts as OpenID Foundation Implementer’s Drafts is under way. To vote, go to https://openid.net/foundation/members/polls/62 and log in using your OpenID by the morning of Wednesday, February 15th...
OpenID Connect in a Nutshell
Nat Sakimura has written a valuable post describing OpenID Connect in a nutshell. It shows by example how simple it is for relying parties to use basic OpenID Connect functionality. If you’re involved in OpenID Connect in any way, or are considering ...
OpenID Connect Implementer’s Draft Review
OpenID Connect is a simple identity layer built on top of OAuth 2.0. It enables clients to verify the identity of and to obtain basic profile information about an end-user. It uses RESTful protocols and JSON data structures to provide a low barrier to entry. The design philosophy behind OpenID Connect is “make simple things...
The Emerging JSON-Based Identity Protocol Suite
My submission to the W3C Workshop on Identity in the Browser discusses The Emerging JSON-Based Identity Protocol Suite. The abstract is: A new set of open identity protocols is emerging that utilizes JSON data representations and simple REST-based communication patterns. These protocols and data formats are intentionally designed to be easy to use in browsers...
OpenID for Firefox4
I created an addon for Firefox4 that learns your OpenIDs when you use them.The addon then asks you whether it may store the discovered openid (claimed_id) shown here at the identity commons site:Another thing the addon does is that it allows the site t...
OpenID for Firefox4
I created an addon for Firefox4 that learns your OpenIDs when you use them.The addon then asks you whether it may store the discovered openid (claimed_id) shown here at the identity commons site:Another thing the addon does is that it allows the site t...
Why You Shouldn’t Freak Out about NSTIC
Kaliya Hamlin (aki IdentityWoman) has posted a superbly written and documented article on Fast Company about why no one should freak out about NSTIC (the National Strategy for Trusted Identities in Cyberspace).
If only all dialog about digital identity infrastructure could be that well grounded and reasoned.
There’s a good reason why Kaliya (along with Phil Windley...

