Comments on: Facebook Becomes Largest OpenID Relying Party

By: Chris Fordham

Chris Fordham — Wed, 24 Jun 2009 19:25:42 +0000

Lets look at this in real terms:

1. Facebook is not regarded as a true Relying Party. Although the specification terms an RP to be simply “A Web application that wants proof that the end user controls an Identifier”, the user still requires the use of Facebook’s authentication policy to link such an account which defeats the practical advantages of using a federated login.

2. Sure I can add a linked account, ONCE logged in via the NORMAL Facebook policy, however if I use a delegated OpenID identity, FB will record my ID as the delegated OpenID identifier. This means I cannot use the identifier that I OWN. Note, I also DO NOT use Google for identity – I own my own identity thank you very much. Please see the bug report which has not had attention: http://bugs.dev...bug.cgi?id=5356

3. “But they’re not “relying parties”, which means that they won’t accept OpenID logins created through other services”.
In terms of the big players, none of them are true relying parties. I cannot use my OpenID identity to login into Facebook, Microsoft, Yahoo nor any Google service.

In essence most of the above simply confuses end-users and degrades the intentions of single sign-on for the web which OpenID essentially provides in its standards.

By: The Dam Just Broke: Facebook Opens Up to OpenID | Techno Portal

The Dam Just Broke: Facebook Opens Up to OpenID | Techno Portal — Mon, 22 Jun 2009 21:49:49 +0000

[...] Jason Kincaid at TechCrunch argues otherwise: “Facebook has really been a relying party since its inception – there’s [...]

By: Who» Who

Who» Who — Fri, 19 Jun 2009 18:16:27 +0000

[...] Via | TechCrunch [...]

By: Facebook uses OpenID | Johnny Chin

Facebook uses OpenID | Johnny Chin — Sat, 13 Jun 2009 15:36:46 +0000

[...] Facebook announced that it would support OpenID and it finally went live with it according to this article: Facebook Becomes Largest OpenID Relying Party. [...]

By: Increase site registrations and return visitors by using OpenID | John Vasko

Fri, 12 Jun 2009 14:24:24 +0000

[...] you to register using OpenID, you can register with your Google or Yahoo account. But according to TechCrunch, Facebook is the first big Internet presence to become both a provider and a relying part…. This means that new Facebook users don’t have to create login credentials specific to [...]

By: Facebook Enables OpenID and Why You Should Care | Black Web 2.0

Facebook Enables OpenID and Why You Should Care | Black Web 2.0 — Wed, 20 May 2009 13:20:06 +0000

[...] Techcrunch and [...]

By: » Facebook adotta OpenID

» Facebook adotta OpenID — Tue, 19 May 2009 19:11:16 +0000

[...] Via | TechCrunch [...]

By: munge

munge — Tue, 19 May 2009 17:08:50 +0000

So Facebook will “rely” on an OpenID issuer for login, but not registration?! And, shrewd strategy, Facebook, scraping Gmail contacts and (presumably) making associations and aggregating data of contacts/friends Gmail and Facebook accounts. Way to triangulate, Facebook. But none of that gives a person much reason to have an OpenID.

By: benmcdonald

benmcdonald — Tue, 19 May 2009 16:45:07 +0000

Using two different browsers wouldn’t do anything as you would still have the same ip address. If Google really wanted to, it could be tracking you right now

By: Facebook lancia il supporto OpenID. Per il login ora basta l’account Gmail - Facebookmania

Tue, 19 May 2009 15:19:31 +0000

[...] Fonte 0 people like this post. [...]

By: MAIN-Blog.de » Blog Archive » Google und Facebook - OpenID machts möglich

Tue, 19 May 2009 14:00:26 +0000

[...] ob es nur für Gmail-Accounts, oder auch alle Google-Zugänge funktioniert. Inside Facebook und TechCrunch erwähnen nämlich nur Gmail-Accounts. Facebook ist jedoch geschickt bei der Sache, da der [...]

By: JamesAven

JamesAven — Tue, 19 May 2009 13:40:16 +0000

The greatest benefit of Facebook is that it has many groups on the site that you can join. So if you are interested in Chicago Cubs you can research Chicago Cubs in the groups section and you will be able to find friends on there that like the Cubs. This is just one example, I know that you can join groups of your favorite football team, television show, or whatever you want for the most part! If you can’t find a group for your interest, you can simply create one!

James
http://EmailCharger.com

By: Paolo

Paolo — Tue, 19 May 2009 12:37:54 +0000

That’s reassuring because I don’t want to single sign on in every web site. I want to keep my accounts well separated and not get traced among servers. However that also means that OpenId is pretty useless. People can use a single userid/password anyway. How’s OpenId better than that?

By: em0resimleri

em0resimleri — Tue, 19 May 2009 11:54:39 +0000

thank you

By: Facebootk adotta OpenID - marko’s weblog

Facebootk adotta OpenID - marko’s weblog — Tue, 19 May 2009 10:52:57 +0000

[...] techcrunch.com || ossblog.it] :facebook, gmail, google, [...]

By: Repubblica.it - Blog - Scene Digitali » Blog Archive » Il Garante avvisa i naviganti, Facebook si apre un po’

Tue, 19 May 2009 10:35:38 +0000

[...] uno scambio alla pari (Open appunto). Qui il commento di ReadWriteWeb. (in inglese) Altra analisi di TechCrunch [...]

By: 19 April 2009 « Concise Comments

19 April 2009 « Concise Comments — Tue, 19 May 2009 08:57:08 +0000

[...] Facebook Becomes Largest OpenID Relying Party OpenID is getting a big boost today as Facebook goes live with its support as a relying party for the standard. It’s a major win for OpenID, which has long had to deal with major companies only half-heartedly embracing the standard, sometimes announcing support to reap the press coverage only to let the effort languish for many months. Facebook announced its intended support of OpenID in April, and less than a month later they’ve delivered. So what changes for users? You’ll now be able to link your Facebook account with your Gmail account, along with those from other OpenID providers. This means that if you’ve logged in to Gmail to check your messages, and you pop over to Facebook, you won’t have to sign in with your Facebook username – you’ll already be logged in. New Facebook members will also be able to register with their Gmail accounts. http://www.tech...-relying-party/ [...]

By: Kataweb.it - Blog - Cablogrammi di Massimo Russo » Blog Archive » Facebook adotta OpenId

Tue, 19 May 2009 08:40:21 +0000

[...] Secondo TechCrunch il sistema di autenticazione aperto dovrebbe già essere operativo sul principale social network della rete (in Italia poco fa ancora non funzionava). E’ un passo avanti significativo per la portabilità dei dati personali. Tags: Facebook, open social, openid, opens social graph, social grph [...]

By: Andy Kruger

Andy Kruger — Tue, 19 May 2009 08:20:01 +0000

Only issues I had were Google Chrome blocking the popup window while linking my Google account to my Facebook account, and surprise when the Facebook login screen just got replaced with my home feed because I was still logged in to Google. There’s no "log in using Google" button, it just detects your Google session and logs you in.

By: Facebootk adotta OpenID « Fabrizio Savella

Facebootk adotta OpenID « Fabrizio Savella — Tue, 19 May 2009 07:33:20 +0000

[...] Via | TechCrunch [...]

By: Gilbert Harding

Gilbert Harding — Tue, 19 May 2009 07:25:01 +0000

Reading some of the comments on that piece would suggest it’s not quite working yet.

By: Raphael

Raphael — Tue, 19 May 2009 07:18:27 +0000

Hi-
there is a common misunderstanding wrt OpenID, which unfortunately also makes this post misleading. OpenID does not give you single sign on but only single ID/password.

So users wont have to remember a new password per site and can reuse account information (name, city, …) across sites.

But OpenID does not do single sign on, so you will have to reenter your password in all sites you visit, you are not automatically logged on in another site when you are logged in at the identity provider site.

You only get single sign on with other technologies such as SAML, which are supported by some services such as salesforce, and Google Apps.

By: Mandar

Mandar — Tue, 19 May 2009 07:05:00 +0000

I linked my Facebook account to Yahoo and Gmail accounts today.
Tried to navigate to Facebook after logging into Gmail…it unable to log into Facebook…
Same behavior with Yahoo id.
Facebook keeps asking for password.

By: Shane

Shane — Tue, 19 May 2009 06:20:14 +0000

There are two ways to use OpenID: 1) as a relying party; 2) as a providing party.

Yahoo’s OpenID involvement is as a providing party, who let you use your Yahoo account as your OpenID login to relying sites. Facebook is on the other side where they allow people to login using OpenID (ie. a Yahoo account) but they don’t let you use your Facebook account at other OpenID relying sites.

I don’t think I explained that very well…

By: Facebook Goes OpenID « Wir sprechen Online.

Facebook Goes OpenID « Wir sprechen Online. — Tue, 19 May 2009 05:31:39 +0000

[...] now supports OpenID and Gmail (!) to login and even register: maximum recognition for OpenID; http://tr.im/lJyI [...]