OpenID for data portability in virtual world

From OpenSimulator

(Difference between revisions)
Jump to: navigation, search
(Use a central OpenID provider)
(Import (copy an account information from one to another))
Line 13: Line 13:
  
 
=== Import (copy an account information from one to another) ===
 
=== Import (copy an account information from one to another) ===
[[Image:openid_auth_1.PNG]]
 
  
 
This is the most simple way, just copy an account from its original Gridservice to another.
 
This is the most simple way, just copy an account from its original Gridservice to another.

Revision as of 10:05, 16 July 2008

Contents

What is OpenID

For OpenID related knowledge: http://en.wikipedia.org/wiki/OpenID

Foreign user login

In virtual world, To enable a foreign user authentication, What I can imagine is that there are 3 ways can be used.

  • Import account from one GridService to another
  • Use a central OpenID provider
  • UserServer(OpenSim) acts as both RP and OP

Detailed explanations are following:

Import (copy an account information from one to another)

This is the most simple way, just copy an account from its original Gridservice to another.

this can be done through webpages, and current OpenSim's Userserver already has a similar XMLRPC method (GetUserProfile) to do such thind, even though some security holes need to be filled.

  • Advantages:
    1. Quick, direct solution, easy to develop / use.
  • Disadvantage:
    1. The same user profile copied many times, can not manage them(in the case you change your profile in 1 gridservice, it does not affect other grids)
    2. User have to remember too many password(even though you can always use the same)
    3. If your name has been taken, you have to change to another - no name portability
    4. other bad points ...

Use a central OpenID provider

Just like in the web world, there are already lots of website enabled both legacy login and openid login,

UserServer can also support OpenID login, in this case, authentication can be delegated to OpenID providers.

  • Advantages:
    1. User auth information is stored only in 1 place.
    2. no worry about your favorite name has been take.
    3. ... some other OpenID advantages

UserServer acts as both RP(Relying Party) and OP(OpenID Provider)

Personal tools
General
About This Wiki