There has been some talk around Attribute Type URI couple of months ago in OpenID mailing lists. Unless we define a set of widely agreed…
View More Attribute Type URI and Script TypeAuthor: Nat
Having been working on Digital Identity since 2000.
Co-author of various identity related specifications like OpenID Connect, JSON Web Token.
Chair of the OpenID Foundation (2011-)
Vice Chair of the OpenID Foundation (2010),
Founder of OpenID Foundation Japan (2008-),
Trustee of Kantara Initiative (2009-).
Essence of Contract Exchange
Abstract This article describes the concept of (abstract) Contract Exchange, and then discusses the OpenID Binding and Use of the Contracts as Access Tokens. At…
View More Essence of Contract ExchangeOAuth Wrap Web App Profile Summary
Here is the Sequence Diagram of OAuth Wrap Web App Profile (Section 5.4). Hope the spec to include such instead of legacy ascii diagram… websequencediagrams.com…
View More OAuth Wrap Web App Profile SummaryOpenID Provider Selection Protocol?
In case when the site want to use OP Identifier, the site typically shows list of icons of the OPs. This list grows quickly and…
View More OpenID Provider Selection Protocol?Sequence Diagram for Artifact Binding
Based on https://openid.pbworks.com/OpenIDwithArtifactBinding
View More Sequence Diagram for Artifact BindingOpenID Process Change
Finally! I am glad to write that OpenID Foundation Board has approved the change in the OpenID Process document so that a working group can…
View More OpenID Process ChangeRe: Is OpenID User Centric?
As I was not able to login to comment on Johannes’s blog… It is about this entry “Is OpenID User Centric?“. Johannes’s comment that OpenID…
View More Re: Is OpenID User Centric?OpenID BizDay #4
I have not been reporting this, but apart from TechNight and BizDay, we are having several discussion groups going on and meetings are getting more…
View More OpenID BizDay #4To Push or Not to Push: that is the question
So I was designing OpenID Authn Artifact Binding based on OAuth. OAuth pushes request token (RT) to the Service Provider (saml:responder, openid:op). Then, I looked…
View More To Push or Not to Push: that is the questionDifference between UMA and CX
This afternoon, I attended UMA WG session at Kantara Initiative. UMA stands for User Managed Access, formally known as ProtectServe. The purpose of this Work…
View More Difference between UMA and CX