OpenID, a great alternative to Microsoft Passport

by: John H. Jones

If any of you are like me, you have dozens of different login accounts on the Internet and all of them seem to have diffent security requirements with respect to a login id and password.  It has gotten so bad that I have had to create a database (password protected of course) just to keep track of all my login accounts on the net along with all my login ids and passwords.

I have a Microsoft Passport account but there are very few sites that utilize it.  Recently, I noticed that a number of web sites that have login accounts are making use of this OPEN alternative called OpenID.  I went to www.openid.net and learned quite a bit about this great, tool, feature, service, standard or what ever you call it but in any event it is saving me time and aggrevation in logging into sites I regularly visit.  In fact, I like the idea so much that I have put in a development ticket into our production system at LabLynx to have it incorporated into our LIMS.  Now we will have regular type logins, Active Directory integration and now OpenID.  Lots of keys can fit the LIMS door so to speak.

Here is some brief information about OpenID along with some links to learn more about it.  Be sure to sign up for your own OpenID account also. 

What is OpenID?

OpenID eliminates the need for multiple usernames across different websites, simplifying your online experience.

You get to choose the OpenID Provider that best meets your needs and most importantly that you trust. At the same time, your OpenID can stay with you, no matter which Provider you move to. And best of all, the OpenID technology is not proprietary and is completely free.

For businesses, this means a lower cost of password and account management, while drawing new web traffic. OpenID lowers user frustration by letting users have control of their login.

For geeks, OpenID is an open, decentralized, free framework for user-centric digital identity. OpenID takes advantage of already existing internet technology (URI, HTTP, SSL, Diffie-Hellman) and realizes that people are already creating identities for themselves whether it be at their blog, photostream, profile page, etc. With OpenID you can easily transform one of these existing URIs into an account which can be used at sites which support OpenID logins.

OpenID is still in the adoption phase and is becoming more and more popular, as large organizations like AOL, Microsoft, Sun, Novell, etc. begin to accept and provide OpenIDs. Today it is estimated that there are over 160-million OpenID enabled URIs with nearly ten-thousand sites supporting OpenID logins.

Who Owns or Controls OpenID?

OpenID has arisen from the open source community to solve the problems that could not be easily solved by other existing technologies. OpenID is a lightweight method of identifying individuals that uses the same technology framework that is used to identify websites. As such, OpenID is not owned by anyone, nor should it be. Today, anyone can choose to be an OpenID user or an OpenID Provider for free without having to register or be approved by any organization.

The OpenID Foundation was formed to assist the open source model by providing a legal entity to be the steward for the community by providing needed infrastructure and generally helping to promote and support expanded adoption of OpenID.

As Brad Fitzpatrick (the father of OpenID) said, “Nobody should own this. Nobody’s planning on making any money from this. The goal is to release every part of this under the most liberal licenses possible, so there’s no money or licensing or registering required to play. It benefits the community as a whole if something like this exists, and we’re all a part of the community.”

This statement continues to resonate today within the OpenID community.