A CDE Definition
An identity system for the Web that lets people use a single username and password to log in and authenticate themselves to OpenID-compliant websites. OpenID is a free system that is distributed across the Internet and maintained by numerous organizations, including major sites such as AOL and Yahoo.
OpenID is also supported in the emerging identity metasystem and can be one of many ID card choices displayed in the card selector's window (see identity metasystem).
Whom Do You Trust?
A major feature of OpenID is that users can decide which OpenID identity provider they trust the most to authenticate them. In fact, users can also become their own identity provider.
The Relying Party Queries the Identity Provider
A website that accepts OpenID is known as a "relying party," because it relies on an OpenID identity provider (IdP) for authentication. The OpenID username, called an "OpenID identifier," can be the URL of the provider with username appended, or it can be an XRI i-name if the relying party accepts it. I-names are human-friendly names, such as "=john.doe," that are linked to the OpenID provider, just like domain names are resolved by the DNS system into actual IP addresses on the Internet (see i-name).
When a user logs into an OpenID website, the script in the Web page redirects the browser to the identity provider. Using a password or other method, the identity provider attempts to authenticate the user and informs the website of its success or failure. For more information, visit www.openid.net. See single sign-on and identity metasystem.
An OpenID Authentication
Before/After Your Search Term
Terms By Topic
Click any of the following categories for a list of fundamental terms.