You may want to consider OAuth,  It is very simple and used by many
PHRs

Jeff
http://code.google.com/apis/health/docs/2.0/developers_guide_protocol.html

On Apr 10, 3:27 am, Fred Trotter <[email protected]> wrote:
> Hi,
>         I will be offering a service that stores personal health
> information directly to consumers. Eventually, I would like to
> integrate it with Google Health.
>
>         For my security design (which is a work in progress) I need to
> rely only on OpenID providers that provide directed identity. Google
> is the only popular OpenID provider to offer this. Since I want to
> eventually integrate with Google Health in any case, it makes sense to
> me to allow only Google OpenID logins for the foreseeable future.
>
>         Normally, an "OpenID chooser" like the one that
> stackoverflow.com uses has several logos of different OpenID
> providers. Based on my read of Google's OpenId terms this might be
> bending the rules. Apparently offering Google Login using the google
> logo is not strictly permitted.
>
>         In my case, I am concerned that by allowing -only- google
> logins, with a google logo, might make users assume that my site is a
> Google offering. It would be bad for Google and for me for users to
> operate under this assumption. For now, I am not using a google logo
> at all.
>
>         Is there a possibility that Google could create a "Google
> login logo" that would make it clear that I was offering a service
> taking advantage of OpenID, but that I was not google. Perhaps a logo
> with the text "login to this site with your Google account" or smthing
> underneath.
>
>        I ask this here rather than on the OpenID forums b/c I will
> eventually want to have a Google Health version of the same. Login
> here using your Google Health account... or something.
>
> Also it would be nice if the questions on the other google logo thread
> were answered.
>
> Please advise...
>
> Thanks,
> -FT

-- 
You received this message because you are subscribed to the Google Groups 
"Google Health Developers" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/googlehealthdevelopers?hl=en.

Reply via email to