Skip to content
Search

OpenID

lastmod 2025-12-22created 2023-02-198 edits

OpenID is an authentication method managed by the non-profit OpenID Foundation. OpenID is a decentralized digital identity system in which every user's online identity is given as a URL (like a blog or home page) or, in recent versions, as an XRI, and can be authenticated through any server that supports the protocol. Since version 1.1, OpenID has used the Yadis service discovery protocol.

Categories

Terms

  • End user (end user) - a person who wants to assert their identity to a site.
  • ID (identifier) - the URL or XRI the end user chose as their OpenID identifier.
  • ID provider (Identity provider; IdP) - a service provider that offers OpenID URL or XRI registration and provides OpenID authentication (and possibly other identity services). Typical examples are Google and Kakao.
  • Relying Party (RP) - a site that wants to verify the end user's ID. It is the party that relies on the IdP to authenticate users. You can think of it as a service that offers features like 'Sign in with XXX'.
  • server or server-agent - a server that verifies the end user's ID; it can be the end user's own server (a blog, etc.) or a server operated by an ID provider.
  • user-agent - the program (a browser, etc.) the end user uses to access an ID provider or relying party.

OpenID Connect (OIDC)

Published in February 2014 by the OpenID Foundation, OpenID Connect (OIDC) is the third generation of OpenID technology. It is an authentication layer on top of the OAuth 2.0 authorization framework. It allows computing clients to verify the identity of an end user based on the authentication performed by an authorization server, as well as to obtain the basic profile information about the end user in an interoperable and REST-like manner. In technical terms, OpenID Connect specifies a RESTful HTTP API, using JSON as a data format.

OpenID Connect allows a range of parties, including web-based, mobile and JavaScript clients, to request and receive information about authenticated sessions and end users. The OpenID Connect specification is extensible, supporting optional features such as encryption of identity data, discovery of OpenID providers, and session management.

See also

  • Authorization
  • OpenAthens
  • Mozilla Persona
  • Central Authentication Service
  • IndieAuth
  • Information card
  • Liberty Alliance
  • Light-weight Identity
  • Security Assertion Markup Language (SAML)
  • Shibboleth (software)
  • Single sign-on
  • SQRL
  • WebFinger
  • WebID
  • WS-Federation
  • OAuth

Favorite site

author Zer0 sitemap