Wednesday, October 29, 2008

Rich-client apps and federated login

Google's OpenID IDP is now live (for details see http://google-code-updates.blogspot.com/2008/10/google-moves-towards-single-sign-on.html) though for a short period of time we are requiring RPs to register before they use it, so we do not yet support automatic discovery.

Of course, I expect one other question a lot of people will ask is when might a large provider like Google become a relying party. Unfortunately there is one big, Huge, ENORMOUS PROBLEM! However it is fortunately mostly a problem of technology, and not as much usability. That problem is rich-client apps (desktop apps and mobile apps). All those Google rich-client apps would break if we supported federated login for our consumer users, and in fact they do break for our enterprise E-mail outsourcing customers who run a SAML IDP, and for which Google is a relying party today. This problem with rich-client apps also affects other sites like Plaxo who are already relying parties.

If community members want to help in this area, please take a look at the research link below which we briefly discussed at the UX summit. A key thing to notice is that this research is about OAuth, and is agnostic to the particular federated login technology used, i.e. SAML or OpenID. It is also agnostic to the type of strong authentication method (if any) that is used to authenticate the user.
http://sites.google.com/site/oauthgoog/UXFedLogin/desktopapps

We need standard open-source components on as many platforms as possible to enable those rich-client apps to support OAuth. That includes a lot more platforms then just Windows and Mac. The harder part is mobile devices (Blackberry, Symbian, Windows Mobile, iPhone, and yes even Android), and other Internet connected devices like Tivos, Apple TVs, Playstations, etc. that have rich-client apps that ask users for their passwords to access services like Youtube, Google photos, etc. If we build these components, they will be useful not only to Google, but also to any other relying parties which have rich-client apps or exposes APIs, and it will also help enterprise SaaS vendors like Salesforce.

If you want to help, send mail to the OpenID/OAuth mailing list to tell people what platform you are targeting in case others want to help. For example, Mike from Pownce did some work a few months ago to use OAuth on an iPhone and described how he got it working. Google has been working on a Windows C# implementation as described in that research documentation, so let us know if you want a copy of the code. Once you have identified a platform, then try to build an OAuth client app that accesses any OAuth enabled API from a vendor which supports OAuth today.

One such OAuth vendor is Google. For documentation on our OAuth support, see http://code.google.com/apis/gdata/auth.html#OAuth. However, you will notice that documentation only talks about web applications, and not rich-client applications. Google still has some work to do so that we properly support rich-client applications that want to use OAuth. For example, today developers of a rich-client app will need to register a web domain with us as the OAuth consumer, and then embed the OAuth Consumer Key/Secret in your app. In addition, the OAuth approval page we show will reference that website, instead of your app. The last key thing to note is that if you tried to make your client app available to a large set (100s of thousands) of end-users, the OAuth process on our side might break if a large set of them try to signup at the same time.

We plan to fix those UI and scaling shortcomings in the coming months, as well as probably support an anonymous Consumer Key/Secret since a commonly installed application would otherwise have the Key/Secret embedded in the code, and thus something a hacker could extract out of the app. But in the meantime, you can work around these limitations to build prototypes.

You may also notice that the prototype in our Desktop App research uses a Google proprietary API called ClientLogin for cases where the user is not authenticated via federated login. There has been some interest in the community to create a standard for that type of API using some parts of OAuth as well. So if you are interested in that topic, please share your ideas.

40 comments:

Marc said...

I have an openid account that works. I tried to sign up for the mysql conference with a yahoo openid and a gmail openid and neither worked. My other one did. I really don't need to care how you do it, it just needs to work as advertised.

Anonymous said...

if you plan to abandon your software, just keep bumping version every 6 months without doing anything else. Your software will still be touted as active, and you enjoy Koxp, Koxp indir, Koxp Merkezi
Koxp free fame without doing anything. What else can be a better deal?

LiaR said...

Koxp 1728 Koxp 1728

Koxp

Anonymous said...

buy wow gold,cheap wow gold,power wow power levelingworld of warcrft gold.

Anonymous said...

Do you know Archlord gold? I like it.
My brother often go to the internet bar to buy Archlord money and play it.
After school, He likes playing games using these archlord online Gold with his friend.
I do not like to play it. Because I think that it not only costs much money but also spend much time. One day, he give me many cheap Archlord gold and play the game with me.
I came to the bar following him and found buy Archlord gold was so cheap. After that, I also go to play game with him.

Do you know cabal online alz? I like it.
My brother often go to the internet bar to buy cabal alz and play it.
After school, He likes playing games using these cabal gold with his friend.
I do not like to play it. Because I think that it not only costs much money but also spend much time. One day, he give me many cabal money and play the game with me.
I came to the bar following him and found buy cabal alz was so cheap. After that, I also go to play game with him.

Anonymous said...

Have you heared about a game which you need use Entropiauniverse ped to play, and you can also borrow Entropia Universe Gold from other players? But you can Buy Entropia Universe Gold, or you will lose the choice if you do not have Entropia Universe Money. If you get cheap Entropiauniverse ped, you can continue this game.
Have you heared about a game which you need use kal geons to play, and you can also borrow kal gold from other players? But you can buy kal online geons, or you will lose the choice if you do not have kal online gold. If you get kalonline Geons, you can continue this game.

Anonymous said...

My friends and I like to buy habbo credits, because the habbo gold is very useful to upgrade equipment. Only your equipment becomes better, then you can win this game. In habbo coins, you can buy everything you want in this game. Tomorrow will be my birthday, so my friends promise to buy habbo gold as gifts. I am so happy. They understand me so well, cheap habbo credits is my favorite.
I like hero gold very much because it is very useful. In fact at first sight I have fallen in love with hero online gold. So no matter how much I have spent to buy hero gold, I never regret. Because of hero online money, I meet a lot of friends. So I never hesitate to buy hero money.

Anonymous said...

You smart and buy Sword of the New World Vis, you play the game is right, Sword of the New World Gold. you have a wonderful time, buy vis, I have it cheap snw vis, I buy Sword of the New World money.
I want give they happy time, twelve sky Gold, I work here with 12sky gold. Though, I can not make much money, twelvesky Gold, But I want to Exercise myself, 12Sky Silver Coins, I get up early 12 sky goldthey are like me and tell me anything about them wakfu kamas, I know wakfu gold. one of my friend likes to go to play buy wakfu kamas, I can not stand praising the land and the nature wakfu money , It makes us to be wakfu kama.
I am so happy to get some aion kina from my friends. They know I need aion online kina, they give me. So I always can get some aion gold from my friends. I buy aion kina with my spare money. It makes me happy that I can still earn some cheap aion kina.

Anonymous said...

If you are cheap wow gold trying any unknown cheats to earn gold, you would cheapest wow gold face some problem and your account will be black out. So don't try to wow gold find cheats instead try to world of warcraft gold sale follow the guideline of world of warcraft. These tips could Cheap Wow Goldwork as gold cheat and can help a lot to earn gold and money. World of Warcraft is the most exiting online game and while Playing the game most of the players struggle wow power leveling to earn a lot of gold.

Most of the players World Of Warcraft Goldtry search cheat code for this game to earn gold. This wow gold cheaparticle will help Wow Goldyou a lot to earn more and more gold.The best way to earn gold in this online game is by going through the guidelines wow gold for saleand other information about itemchannel.comthe game that are available on the internet .
Wow Gold aoc gold warhammer goldbuy warhammer gold</a

Unknown said...

www.level83.blogspot.com

LiaR said...

pırlanta yüzük
pırlanta kolye
altın yüzük
pırlanta küpe
sXe
sXe
Koxp

Unknown said...

timur taş uçar hoca ,timurtaşhoca,timur taş,timurtaş

Unknown said...

timur taş uçar hoca ,timurtaşhoca,timur taş,timurtaş

Unknown said...

www.mutfak1453.tr.gg

www.timurtashoca.tr.gg

Vbseo-tr said...

thanks
http://www.forumlike.net/
emo resimleri forum
http://www.muhtesemforum.net/

Vbseo-tr said...

Full Albüm İndir
Emo Resimleri
Pc Donanım

Unknown said...

sxe
sxe injected

Mehmet said...

thanxxx

PaylasTR

Pvp

Private Server

Unknown said...

http://www.guvercin-forum2009.yetkinforum.com
http://www.koxpcu.yetkinforum.com
http://www.level83.blogspot.com
http://www.timurtashoca.blogspot.com
http://www.timurtashoca.yetkinforum.com

Unknown said...

 Güvercin

1299 koxp

koxp 1299

timurtas hoca

Admin said...

Ngalor Ngidul Dot Com
Serba Serbi Peristiwa Apaan Aja
nowGoogle.com Adalah Multiple Search Engine Popular
Indonesia Java International Destination
nowGoogle.com Adalah Multiple Search Engine Popular
Indonesia Java International Destination
Stockist K-Link
K-Link
Stokis K-Link
Stokis
News Freebies
Untuk Kontes SEO

Trabzonspor canlı maç izle said...

cs oyna 1.6 server cs 1.6 serverlarında cs oyna http://www.csturkey.gen.tr

AshLeon said...

thankss

http://metin2pvpserverlar.forumclan.com

milla said...

these issues should not be a problem for this kind of business that does it all as it meets the site buy viagra

Unknown said...

www.supermuzik.org

Unknown said...

Aşçı Forum

Aşçı İş Arayanlar

Aşçı Arayanlar

Yerli Yemek Tarifleri

Aşçı Okulları

Dünya Global Mutfak

Profesyonel Yemek Malzemeleri



Profesyonel Sos çeşitleri


Tatlı Pasta Çeşitleri


Resturant Kurulumu


Yemek Üzerine İş yeri Kurulumu


Profesyonel Mutfak Malzemeleri

serkan said...

thanks for all information

bağcılar profilo servisi
bayrampaşa profilo servisi
bakırköy profilo servisi
avcılar ariston servisi
bağcılar ariston servisi
bahçelievler ariston servisi
bayrampaşa ariston servisi
beylikdüzü ariston servisi

turkey said...

yıldızname
vefk
isim falı
değerli taş
medyum

alice said...

Helo, your blog is really good, I like it very much!By the way, if you like nike chaussures tn you can come here to have a look!
ugg outlet
uggs outlet
ugg classic
ugg classic boots
ugg online
ugg boots
cheap ugg boots
discount ugg boots
australia ugg boots
wholesale ugg boots
sheepskin ugg boots
ugg boots 5815
ugg boots size 9
ugg snow boots
womens ugg boots
classic tall ugg boots
short ugg boots
new ugg boots
winter ugg boots
ugg boots outlet

Unknown said...

Superb job! The information presented was great. I hope that you carry on with the excellent work succesfully done.
Corona CA Locksmith

ilizyonist said...

Travesti,
Escort Bayan,
Travesti,
Escort Bayan,
Adana Escort Bayan,Ankara Escort Bayan,
Antalya Escort Bayan,istanbul anadolu yakası Escort Bayan,
istanbul avrupa yakası Escort Bayan,
Bursa Escort Bayan,
tekirdağ Escort Bayan,
Kayseri Escort Bayan,
izmir Escort Bayan,
mersin Escort Bayan
ankara Escort Bayan,
istanbul anadolu yakası Escort Bayan
Escort Bayan Forum
İstanbul Travestileri
Escort Bayan
Travesti
Escort Bayan Ankara
Escort Bayan İstanbul
Travesti
Escort Bayan İstanbul
Ankara Escort Bayan
Escort Bayan
Ankara Escort

Anonymous said...

I completely agree with the above comment, the internet is with a doubt growing into the most important medium of communication across the globe and its due to sites like this that ideas are spreading so quickly.


Carbon Credits

Unknown said...

Online Hile


Sinema Burda

London Crumpet said...

London escorts directory London Crumpet is created to expose Independent escorts and escort agencies in London. Everybody can post their advert on this directory for FREE.

Unknown said...

Ankara'nın en güzel escortlarıyla görüşmek için ankara vip escort sayfamızı ziyaret edebilirsiniz.

ertunç said...

https://turkeywebtasarim.blogspot.com/
Web tasarım

ertunç said...

avukat web sitesi tasarım

ertunç said...

web tasarım
avukat web tasarım sitesi

ertunç said...

mobilya tamiri
mobilya kurulumu
mobilya kurulumu, marangoz ustası
mobilyacı
mobilya ustası
montaj ustası

ertunç said...

söyledim söyledim