Hi. I would like to propose the project: OpenID[1] support in XWiki. OpenID is an open, decentralized, free framework for user-centric digital identity. [1] 1) XWiki as openid consumer. Possibility to login into xwiki with openid. Value: major 2) XWiki as openid provider. Some users of xwiki will have openid account like username.xwiki.host or xwiki.host/openid/username For example users in xwiki.com will have openid = username.xwiki.com Value: minor User story: I have account and virtual wiki at username.xwiki.com. I wish to login with openid into xwiki.org. Standard authentication process with openid[3]: I enter to openid login form at xwiki.org my openid=username.xwiki.com, click sumbit. xwiki.org redirects me to openid authentication page in username.xwiki.com. I enter my password, click submit. username.xwiki.com redirects me back to xwiki.org. Done. I logined into xwiki.org with openid. If I already logined to username.xwiki.com, xwiki.org will not redirects me to username.xwiki.com, and I don't enter password. I may use my openid=username.xwiki.com as normal openid. For example I may write comments to livejournal.com with openid[2]. Advantages: The User needs only one login for all xwikis and openid services. User's openid will be point at homepage on xwiki (possibly). Increase popularity of xwiki project: There are not much openid providers for now. [4] XWiki users will promote xwiki their openids (*.xwiki.com) There are also bounty($5000) for openid-enabled opensource projects: http://iwantmyopenid.org/bounty There are other authorization protocols, similar to the technology openid: http://lid.netmesh.org/ http://en.wikipedia.org/wiki/Inames (inames mostly paid) http://yadis.org/ But it is not too common. Technical details: Possible openid implementations: http://code.google.com/p/openid4java/ or http://code.google.com/p/joid/ Consumer: Then user logins with openid first time, xwiki create special user like XWiki.openid_<user's openid> for a user settings storage. Provider: java servlet. WDYT? Is this project suitable for GSoC 2007? Estimated workload: 1-2 man/month References: [1] http://openid.net/ [2] http://www.livejournal.com/openid/ [3] http://openid.net/about.bml [4] http://openid.net/wiki/index.php/Public_OpenID_providers -- Artem Melentyev, UralSU, CS401 --You receive this message as a subscriber of the xwiki-dev(a)objectweb.org mailing list. To unsubscribe: mailto:xwiki-dev-unsubscribe@objectweb.org For general help: mailto:sympa@objectweb.org?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws

Hi, I have a major piece of the SSO puzzle under development currently, due for release in the next few weeks which targets enterprises, it will be available under the apache 2.0 licence. It will allow applications such as xwiki to implement the SAML 2.0 spec cleanly using an easy to adapt java library/filter combination between the application (xwiki) and a central point called the "enterprise sign on engine". The ESOE is an extremely intelligent piece of software supporting many types of internally facing enterprise SSO solutions including automatic sign on for windows machines connected to AD, login to windows, automatically logon to the web tier. Additionally it supports many external facing SSO solutions including OpenID, Shibboleth 1.3x and Yahoo BB auth to name just the starting line up, its extensible architecture means it can support anything new into the future. Essentially you make xwiki understand our single service provider and using the ESOE automatically get any kind of SSO/Authentication system available on the planet supported. If your interested and I hope you are I can post again when its out with the project URL.

jeremi joslin wrote: > Hi Artem, > I think it's a great idea. But I don't think it's very long to > implement. I would prefer you to work on a more generic problematic of > single sign on in xwiki. > You can implement OpenId and another single sign on a more enterprise > oriented than OpenId. > WDYT? > Jeremi > On 3/20/07, Artem Melentyev &lt;melenartem(a)ya.ru&gt; wrote: >> Hi. >> >> I would like to propose the project: >> >> OpenID[1] support in XWiki. >> >> OpenID is an open, decentralized, free framework for user-centric >> digital identity. [1] >> >> 1) XWiki as openid consumer. >> Possibility to login into xwiki with openid. >> Value: major >> >> 2) XWiki as openid provider. >> Some users of xwiki will have openid account like >> username.xwiki.host >> or xwiki.host/openid/username >> For example users in xwiki.com will have openid = >> username.xwiki.com >> Value: minor >> >> User story: >> I have account and virtual wiki at username.xwiki.com. >> I wish to login with openid into xwiki.org. >> Standard authentication process with openid[3]: >> I enter to openid login form at xwiki.org my >> openid=username.xwiki.com, >> click sumbit. >> xwiki.org redirects me to openid authentication page in >> username.xwiki.com. >> I enter my password, click submit. >> username.xwiki.com redirects me back to xwiki.org. >> Done. I logined into xwiki.org with openid. >> If I already logined to username.xwiki.com, xwiki.org will not >> redirects >> me to username.xwiki.com, and I don't enter password. >> I may use my openid=username.xwiki.com as normal openid. For >> example I >> may write comments to livejournal.com with openid[2]. >> >> Advantages: >> The User needs only one login for all xwikis and openid services. >> User's openid will be point at homepage on xwiki (possibly). >> Increase popularity of xwiki project: >> There are not much openid providers for now. [4] >> XWiki users will promote xwiki their openids (*.xwiki.com) >> >> There are also bounty($5000) for openid-enabled opensource projects: >> http://iwantmyopenid.org/bounty >> >> There are other authorization protocols, similar to the technology >> openid: >> http://lid.netmesh.org/ >> http://en.wikipedia.org/wiki/Inames (inames mostly paid) >> http://yadis.org/ >> But it is not too common. >> >> Technical details: >> Possible openid implementations: >> http://code.google.com/p/openid4java/ >> or http://code.google.com/p/joid/ >> Consumer: >> Then user logins with openid first time, xwiki create special user >> like XWiki.openid_<user's openid> for a user settings storage. >> Provider: >> java servlet. >> >> WDYT? >> >> Is this project suitable for GSoC 2007? >> Estimated workload: 1-2 man/month >> >> References: >> [1] http://openid.net/ >> [2] http://www.livejournal.com/openid/ >> [3] http://openid.net/about.bml >> [4] http://openid.net/wiki/index.php/Public_OpenID_providers >> >> -- Artem Melentyev, UralSU, CS401 >> >> >> >> >> --You receive this message as a subscriber of the >> xwiki-dev(a)objectweb.org mailing list. >> To unsubscribe: mailto:xwiki-dev-unsubscribe@objectweb.org >> For general help: mailto:sympa@objectweb.org?subject=help >> ObjectWeb mailing lists service home page: >> http://www.objectweb.org/wws >> >> > ------------------------------------------------------------------------ > > --You receive this message as a subscriber of the > xwiki-dev(a)objectweb.org mailing list. > To unsubscribe: mailto:xwiki-dev-unsubscribe@objectweb.org > For general help: mailto:sympa@objectweb.org?subject=help > ObjectWeb mailing lists service home page: > http://www.objectweb.org/wws --Bradley Beddoes Lead Software Architect http://intient.com Intient - "Open Source, Open Standards" --You receive this message as a subscriber of the xwiki-dev(a)objectweb.org mailing list. To unsubscribe: mailto:xwiki-dev-unsubscribe@objectweb.org For general help: mailto:sympa@objectweb.org?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws

community further to integrate appropriately. regards, Bradley