All users that have a Feide ID, can now use their ID with OpenID service providers.

Currently, the Feide OpenID interface is not official in the sense that we cannot guarantee anything. We appreciate if end-users test the service and gives us feedback on how it works, if it works and what feature to implement next.

The Feide OpenID interface supports authentication with OpenID 1.1. I've implemented Simple Registration Extension, but this is not yet as stable as the basic authentication functionality.

How to use Feide OpenID

In this early test-phase of Feide OpenID the URLs are temporary. That means if you start using this test-service you at some points need to update your OpenID references on your website.

The OpenID Provider URL is:

http://feide.erlang.no/openid2/examples/server/server.php

The OpenID Delegation URL should be:

https://openid.feide.no/andreas@uninett.no, where andreas@uninett.no is my Feide name. Replace it with your Feide name.

To make an OpenID from your blog/web site, in the main html file, in example index.php or index.html add the following two elements in your head section:

<link rel="openid.server" href="http://feide.erlang.no/openid2/examples/server/server.php" />

<link rel="openid.delegate" href="https://openid.feide.no/andreas@uninett.no" />

We also want to give Feide users that does not have their own webpage the possibility to use OpenID with Feide. To enable that we will offer predefined OpenID URLs for every Feide name. We cannot do this before we have setup SSL, a valid cert and stabilized the URLs. Probably we will end up with URLs like this: https://openid.feide.no/andreas@uninett.no. This URL will then present a small web page with the correct OpenID server and possibly delegate elements, making it valid OpenIDs bound to the corresponding Feide ID.

Another example

You need to replace your web site url and the Feide ID. Say your web site is on http://peter.mycoolblog.no and your Feide name is peter@uit.no Then your OpenID becomes exactly this URL. Next you need to edit the front page of http://peter.mycoolblog.no and add the following section in the head:

<link rel="openid.server" href="http://feide.erlang.no/openid2/examples/server/server.php" />

<link rel="openid.delegate" href="https://openid.feide.no/peter@uit.no" />

Where to use Feide OpenID

Here are some OpenID service providers that you can test with:

• ClaimID
• Jyte.com
• Pibb.com
• ma.gnolia.com

All these are tested to work with Feide. There are several more out there.

Sign on using Feide OpenID

I go to jyte.com

As http://erlang.no is setup as a an Feide OpenID as described earlier in this article, by clicking sign on, I am redirected to the normal Feide login screen (unless I have a valid SSO session):

After logging in and because this is the first time I use Feide OpenID with Jyte, I am asked whether I want to accept to authenticate towards this service. I can check remeber this option to not be asked again for this service.

I click confirm. And, weee... I am logged in to Jyte: