Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

OpenID: Single Sign On for the Web?: Page 2 of 6

Still, IT should pay attention: Support for OpenID comes at very low risk or commitment of resources, and companies that get in on the ground floor can benefit from organic growth.

Keep It Simple

Two major principles of OpenID, which was created by Brad Fitzpatrick, developer of LiveJournal blogging software, are simplicity and decentralization. When a user logs in to a site that supports OpenID, that site checks with a third-party server to confirm that the user owns the URL. Anyone who owns a server connected to the Internet can create his or her own identity and provide identity services for others. Such decentralization is intended to foster adoption because anyone can create or accept identities without having to get permission from a monolithic controlling entity.

Users who don't want to set up their own servers can obtain an OpenID from brand-name Internet companies. For instance, AOL now issues OpenID credentials to all its subscribers, and VeriSign's Personal Identity Provider, a free service that supplies users with online identities, supports OpenID. Smaller providers such as Get OpenID and MyOpenID also create identities for users. In addition, Microsoft has promised to support OpenID in its future identity services, and the Liberty Alliance is working on interoperability issues.

Sounds great, right? Problem is, OpenID isn't widely supported. As of press time, the Web site OpenIDDirectory.com lists just 295 sites that support the spec. While several, such as Technorati.com and LiveJournal, are high-profile, the majority are small fry.