OpenID login workflow?

Question

When someone signs up on a site using an Open ID, what happens behind the scenes?

can someone explain to me the workflow / steps of what happens during a normal login from a partner site with an open identifier? (e.g. this site)

i.e. when I log in to myopenid, what is transferred to this site? how does SO know that this is the correct login?

Answer 1

What is OpenId?

OpenID is an open, decentralized , free framework for user digital identification. OpenID uses existing Internet technologies (URI, HTTP, SSL, Diffie-Hellman) and understands that people are already creating a personality for themselves, whether in their blog, photo stream, profile page, etc. With OpenID, you can easily convert one of these existing URIs into an account that can be used on sites that support OpenID logins.

Openid

Difference between OpenId and regular authentication form?

The difference is that the authentication will be decentralized to an external site (example Wordpress, yahoo ...). The website will know that the authentication is OK or not, and let you loggin.Conventional authentification form make a comparison with their private database and let you loggin or not. You can only use the loggin password for this website. With openId, you can use the same loggin password on multiple websites.

How it works?

• Here you can see the workflow (image)
• Step by Step Actions Here
• Step-by-step actions here (another blog)
• List item

Actions

• The user connects to the site with support for OpenID.
• User enters credentials.
• Message made with BASE64 (website for provider)
• An answer has been created (which contains the expiration date)
• The website redirects the user to the provider to log in.
• The user enters a password and sends.
• Verification completed.
• To come in!

---

I wrote this answer for this question , but this one is older, so I pasted my answer here.

Answer 2

Jeff Atwood posted a good review of this here

Answer 3

I stumbled upon this wonderful introduction of OpenID, which is not too high-level and not too low-level.

http://wiki.openid.net/w/page/12995171/Introduction

It is a bit verbose and more or less written as prose, but it is a fun read and very informative about what happens behind the scenes.

Answer 4

Also browse the “Login” section of the OpenID Wikipedia entry . (You probably already read it if you link to the links in Jeff's article.)