We have just enabled SignOn.com as an Auto-Connect IdP end point. What does this mean? If you are an SP and are interested in evaluating Auto-Connect, you can now use SignOn.com as an IdP to validate your setup. The short version A few months ago, Ping Identity announced the concept of Auto-Connect. Auto-Connect [...]

One of the reasons behind launching SignOn.com was to compare and contrast different identity protocols. There are things that you can learn by reading the specs. And then there are things that you can learn by deploying/implementing the specs. We have had support for OpenID and Information Cards for a long time. With the latest release, [...]

Trust (using the word here in a broad, abstract way) has been one of the strongest reason for the OpenID adoption. The spec does not require for OPs and RPs to get together and discuss key exchange, business value, liability issues, attribute data and so forth. OPs and RPs work independently of each other and [...]

A while back I spent some time researching into several strong authentication methods that are available in the online world. In order to get real user experience, I ended up creating online accounts with several banks and financial institutions . I got to try out various methods including OTP, biometrics, device fingerprinting etc. However, I [...]

I’m back from IIW2007B. As always, there was a lot of energy, lot of discussions and lot of networking. OpenID 2.0 was announced. OAuth 1.0 was announced. There were quite a few sessions on VRM. Some good discussions on reputation around OPs, RPs and users. I also got to spend one afternoon in the OSIS [...]