Recently, I integrated OpenID into the latest revision of the Cub Scout BragVest site and I think it’s truly the wave of the future. But, as of yet, it’s a highly underutilized technology so I wanted to give a brief overview of it here.
What is it?
The OpenID site has a good description to start with:
OpenID allows you to use an existing account to sign in to multiple websites, without needing to create new passwords. With OpenID, your password is only given to your identity provider, and that provider then confirms your identity to the websites you visit. Other than your provider, no website ever sees your password
So let’s unwrap this. In a nutshell, OpenID allows you to use your existing accounts at big sites (like Google, Yahoo, MySpace, Hotmail, Facebook and Twitter) to login to other sites. All without creating a new username and password.
You are simply redirected to the site of your choice to login and then securely redirected back to the original site with an authentication token. The original site never sees your password.
What Problem Does it Solve?
Imagine that you find a cool new site (like BragVest) and you want start tracking your cub scout achievements. But you don’t want to create yet another login and password. With OpenID you can login to that site using your existing account at Facebook or Google account.
It also means that you instantly have an account at the new site. No need to go through a new account creation or email verification process. Pretty cool, huh?
How Do I Use It?
The simplest way to get started with OpenID is to use a widget like the one provided by RPX Now. It’s free for basic use and lets you choose up to six “providers” (Google, Yahoo, etc).
To get going, you just go to RPX now and create an account. Then they walk you through the following three steps:
- Generate Widget Code: RPX provides you with the code for a simple iFrame that displays their widget inline on your page. It’s used to let the user select their provider in a user-friendly format.
- Receive Tokens: After the user has been authenticated on their favorite site, you will receive a token value. You use that token to make auth_info call and retrieve more data (email, username, etc) about the user. RPX provides you with sample code to do this in a variety of languages.
- Choose Providers: On the RPX site, you can choose which providers (Yahoo, Facebook, Google, etc) that you’d like their widget to display.
After that, you’re done! I’m hoping to see more sites start utilizing openID so I can stop having to remember so many usernames and passwords.
