Authenticate users with an OpenID server

[ZmjbS]

Here in Iceland every member of an SAR unit already has an account with ICE-SAR. We're going to want to pull various bits of data from their database so we might as well use their central authenticator. Hopefully they'll play nice and just set up an OpenID server which we can all use.

[iceoskara]

If ICE-SAR will start to use Íslykill (http://www.island.is/islykill/) for authentication then it would make sense to use Íslykil for authentication from day one.

[ZmjbS]

That would certainly make sense if they were to use Íslykill. Do you know about any ideas from within Landsbjörg about doing so?

[iceoskara]

Landsbjörg will evaluate authentication options after the new year and one of the options will be Íslykill. Personally I think that Landsbjörg should use multiple authentication providers (google, facebook, live id, íslykill, ...) if possible. So one person could use multiple logins to access her account at Landsbjörg. Landsbjörg should basically try to avoid being a authentication provider because doing that securely is not a simple task and adding authentication provider will create yet another login to remember for users. From tzar point of view I see two ways that tzar would access data from ICE-SAR:

• use the logged in user authentication token to access ICE-SAR data related to that user
• use service user to access higher level and common data

[ZmjbS]

That Landsbjörg is looking into their authentication methods is very positive news. We mostly agree on the purpose of tying in with Landbjörg. I want read access to their data and I want to lower the barrier for users to use Landsbjörgs services.