Review of Proposed Second OpenID Connect Implementer’s Drafts

The OpenID Connect Working Group recommends approval of the following specifications as OpenID Implementer’s Drafts: Basic Client Profile – Simple, self-contained profile for a Web-based Relying Parties using the OAuth code flow. Implicit Client Profile – Simple, self-contained profile for a Web-based Relying Parties using the OAuth implicit flow. Messages – Defines the messages that […]

OpenID Connect Implementer’s Drafts Approved

The OpenID membership has approved the following specifications as OpenID Implementer’s Drafts in the vote held from February 7th to 15th, 2012: • Basic Client Profile – Simple self-contained specification for a web-based Relying Party. (This spec contains a subset of the information in Messages and Standard.) • Discovery – Defines how user and provider endpoints […]

OpenID Connect in a Nutshell

Nat Sakimura has written a valuable post describing OpenID Connect in a nutshell. It shows by example how simple it is for relying parties to use basic OpenID Connect functionality. If you’re involved in OpenID Connect in any way, or are considering becoming involved, his post is well worth reading.

Review of Proposed OpenID Connect Implementer’s Drafts

The OpenID AB+Connect Working Group recommends approval of the following specifications as OpenID Implementer’s Drafts: Basic Client Profile – Simple self-contained specification for a web-based Relying Party.  (This spec contains a subset of the information in Messages and Standard.) Discovery – Defines how user and provider endpoints can be dynamically discovered. Dynamic Registration – Defines […]

OpenID Connect Specs Incorporating Developer Feedback

Since we posted in July about the availability of preliminary OpenID Connect specifications, developers have been building implementations and submitting feedback on the specs.  The specs have been revised to incorporate their feedback.  A new map of the specs is as follows: The biggest difference you’ll notice is that there is now only one spec to implement for “Minimal” […]

Current Map for OpenID Connect

There is now a set of functionally complete specifications for OpenID Connect.  The diagram below shows the relationships between the current specs and contains links to each of them.  These specifications are ready for early developer feedback and prototype implementation work.  Please send feedback on them to the OpenID Artifact Binding Working Group Mailing List. […]

PAPE Approved as an OpenID Specification

The OpenID Foundation membership has approved OpenID Provider Authentication Policy Extension 1.0 as an OpenID specification by a vote of forty-two to three, with seven abstentions. This is a significant development for the OpenID community for two reasons…