[
https://issues.apache.org/jira/browse/JSPWIKI-94?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12675854#action_12675854
]
Tilman Bender commented on JSPWIKI-94:
--------------------------------------
Just to make sure: Wa are talking about OpenID Authentication 2.0 right?
If so, Harry, I think your research on who decides what OpenID Provider (OP) to
use is not fully correct.
As far as I can see the decision which provider to use is made by the relying
party (RP), that would be JSPWiki in our case.
Concering the questions whether you can define multiple OPs and an order:
AFAIR you can. But only when using XRDS-Based discovery (not HTML-Based
discovery), because in a XRDS-Document you can define multiple services and
their priority.
"Can the consumer control which OP's to allow and which ones not."
I think this is what they call whitelisting. It is not really recommended
because it would be a bit of stopper for OpenIDs decentralization.
I must admit though, that the last question is also one of the parts about
OpenID, which I don't fully understand by now.
You can find my bookmarks on it here: http://delicious.com/FuzzyFrog/openid
> OpenID support
> --------------
>
> Key: JSPWIKI-94
> URL: https://issues.apache.org/jira/browse/JSPWIKI-94
> Project: JSPWiki
> Issue Type: New Feature
> Components: Authentication&Authorization
> Reporter: Janne Jalkanen
> Priority: Minor
> Fix For: 3.1
>
>
> Now that OpenID2.0 is launched, we should look seriously into enabling that
> as a way to manage your JSPWiki identity.
> http://openid.net/2007/12/05/openid-2_0-final-ly/
> I don't want to put any specific version on this item - it'll come when
> someone is motivated enough to make it work ;-). But it's a good idea to
> keep here so that we don't forget about it.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
