News for hackers. Stuff that matters.
Re:OAuth vs. SAML vs. OpenID Connect by willow9886 on Wednesday December 07, 2016 @06:16PM (#13127110)
> My only complaint is the name of OpenID Connect is simply confusing.

Yea..many people only remember the failed OpenID 1 & 2 specs...so, out-of-the-box there is some developer fatigue associated with Connect. However, federation standards have proven to be pretty sticky--SAML was written 10+ years ago. Hopefully as Connect continues to be developed, marketed, and implemented by developers, it will over shadow previous unsuccessful versions of the protocol.

Re:OAuth vs. SAML vs. OpenID Connect by philips on Wednesday December 07, 2016 @06:20PM (#13127131)
I have just started saying OIDC as that has no fatigue attached to it. And then if people want clarification I explain the whole silly naming story.
Re:OAuth vs. SAML vs. OpenID Connect by idm_guru on Thursday December 08, 2016 @10:37AM (#13130900)
It's no more confusing then LDAP. First there was LDAP 1.0, 2.0, now we all use 3.0...

OpenID 2.0 is deprecated. Don't use it.

The current OpenID authentication protocol = OpenID Connect.

In the not too distant future, no one will even remember that something called OpenID 2.0 existed.

Maybe OpenID Connect should be OpenID 3.0? I think the idea was to show alignment with Facebook Connect's design...but more open. Remember, at the time Facebook Connect provided some good data--it was a massive user acceptance test.

IMHO, the blame lies with the OIDF for not delivering this message. OpenID Connect has been final for 4+ years. What's taking so long? Maybe it's not in the interest of the OIDF's controlling board members to promote this distributed identity infrastructure? MSFT wants you to use Azure AD. Google wants you to use their IDP. Maybe they don't want to promote until they have product ready? Stay tuned... I think when it's in the interest of the current finanical backers of the OIDF to promote OpenID Connect, no one will remember that old OpenID 2.0 thing.

Re:OAuth vs. SAML vs. OpenID Connect by user5994461 on Wednesday December 07, 2016 @08:04PM (#13127631)
Don't confuse OpenID and OpenID Connect.

They are very different things.

Re:OAuth vs. SAML vs. OpenID Connect by pyvpx on Thursday December 08, 2016 @05:03AM (#13129418)
with very similar names?
Re:OAuth vs. SAML vs. OpenID Connect by user5994461 on Thursday December 08, 2016 @07:13AM (#13129850)
They shouldn't have had similar names. This is causing a lot of confusion ^^
Re:OAuth vs. SAML vs. OpenID Connect by nailer on Thursday December 08, 2016 @12:09PM (#13131900)
OpenID has a bad enough reputation amongst developers - with the user being asked to remember bizarre URLs - that I'm surprised they kept the name.
Re:OAuth vs. SAML vs. OpenID Connect by WorldMaker on Thursday December 08, 2016 @11:23AM (#13131371)
There's also a flipside too: those of us that remember the original community grassroots spirit and attempted simplicity of early OpenID and feel like OpenID Connect misses a lot of the old point of OpenID, and definitely a lot of the intended simplicity.