OpenId

1. Knowing Open Id and Its Uses Open id is an open standard and decentralized authentication protocol. Promoted by the non-profit foundation, it allows the user to be authenticated by co-operating sites using a third party service, eliminating the need for webmasters to provide their ad hoc login systems, and allowing users to log into multiple unrelated websites without having to have a separate identity and password for each. OID is a way of identifying you no matter which site is visited. It’s like having a driving license for using the internet. However, it’s even more than that because the user can associate information with the ID like name and e-mail address, and then the client can choose how much web sites get to see about the information of him or her. This means that web sites that take advantage of opened won’t bother the user for the same information over and over again. It simplifies the sign in process, one needs to remember only the name and password of open ID, and from there they can log in into multiple applications. It very much secure as the information is not shared with any web sites and people can enjoy it without any fuss. The open ID uniquely identifies the user on the internet so whenever OpenID account is seen it will automatically detect the owner. There are two types of information one is private, and the other is public. The data which is made public is only shown on the web other than that private data is not accessible besides user. Identifiers: To obtain an open id enabled URL that can be used to login into open ID-enabled web sites, a user registers an id identifier with an identity provider. Identity providers offer the ability to register a URL (third domain) that will automatically be configured with open ID authentication service. Once they are recorded the user can use an existing URL under their control as an alias or “delegated identity.” They directly insert the appropriate open ID tags in the HTML.

2. OAuth 2.0: OAuth is an open standard for access delegation, commonly used as a way for internet users to grant web sites or applications access to their information but without giving them the password. This mechanism is used by several companies like Microsoft, Google, and Facebook, etc. to permit the users to share information about their accounts with third-party applications. Open ID is an extension of OAuth 2.0 which adds and strictly defines an ID token for returning user information. A system called identity provider handles the authentication process and returns an access token representing success. The IDP may require additional factors such as SMS or E-mail; the ambiguity guarantees that the identity provider will build an incompatible system. Most of the people have some accounts for a different purpose which results in many passwords and username; it becomes difficult to remember all the credentials simultaneously. Moreover, the accounts are prone to hacking so it is better to have open ID account as it is safe, simple and most importantly with one username and passcodes different web sites can be logged in.