How is OpenID implemented?

Question

How do you design and implement OpenID components?

(Was "How OpenId Works")

I understand that this question is something like duplicate , and yes, I read the spec and the wikipedia article .

After reading the materials mentioned above, I still do not have a complete picture in my head about how each step of the process is processed. Perhaps the missing is a good workflow diagram of how the OpenID implementation works.

I’m considering including OpenID in one of my applications for hosting a script with a single login sign, and I’ll probably go in for DotNetOpenID instead of trying to implement it myself, but I still want to understand the details better before getting started .

Can anyone recommend books or websites that explain this well? It does not hurt to have an answer that also covers the basics here and on this site.

[change]

I changed the name to be more specific to implementation, since there are obviously many places to get a ten thousand foot view.

Answer 1

This page contains a beautiful flowchart.

I found this link in the OpenID Wiki , you can check more resources there.

Answer 2

I recommend Joseph Smarra's Recipe for OpenID-Enabling Your Site .

I did not read the DotNetOpenID documents, but I would like that any implementation that you choose would also have overview documentation and / or examples illustrating the use of the API.

Answer 3

Stop the Security Now podcast, episode 95 . ( Actually audio )

Answer 4

Jeff has an excellent article on OpenID, where he shares his impressions:

OpenID: Does Another User and Password Really Need a World?

The official OpenID website has links to tutorials:

http://openid.net/developers/

Here you can get good login control for OpenID (which is also used here in stackoverflow):

http://www.idselector.com/

Answer 5

Related also:

Dick Hardt’s super-famous talk about Identity 2.0 , I suppose, almost everyone watched it, but if you don’t have it I should see it.

It is rather an explanation of the need for things like Open ID and not necessarily their implementation.