No single authority is needed to vouch for a given identity, instead numerous authorities can validate an identity. That's my understanding.

Distributed identity seems to be notoriously tricky to fully understand for both end-users and developers. I still don't really get OpenID.