OpenID, I'm Starting To Understand
Important edit: Seems it doesn't work with Google Apps accounts - apologies to Zach in the comments, you were quite right. I'm revising this post. However, it does still work as described with all Google Mail domain accounts (e.g. personal Google accounts).
So, OpenID. Been about for a while. I kind of knew how it worked. I also knew I had dozens of OpenIDs, all in places of no use to me whatsoever that were generated automatically when I signed up for some service or other.
It was only while working for Drupal Help Haiti this week, when Robert Douglass suggested everyone login to admin using OpenID so he can change the password, that I was forced to really use it.
The problem with OpenID is you don't want dozens. You want one. It works by letting you sign in to any associated service once you're signed in to just one of the associated services, which is really cool. But it means you need to host your OpenID with a service you are *always* logged in to anyway for it to be truly useful.
Here's my "Dur" moment. Did you know Google supports OpenID? By that, I mean did you know if you see a "Login using OpenID" box you can just throw your Google Mail email address at it. *Any* Google Mail domain email address! (Not your company email address, if you're a company using Google Apps, but maybe they'll add that feature soon?)
I didn't. Wow. This just made my life so much easier.
I now officially "get" OpenID. Thanks to Google! Now I know I can just hurl my Google Mail address in that box and as long as I'm signed in to mail.google.com (which I nearly always am) I will never be asked for a password again, I'm laughing!
Google for world domination? Probably. But for now they just made Drupal administration a lot easier for me. =)
Google profile url instead of e-mail address
I believe it's with the introduction of Google Buzz that you now need to enter your Google profile url instead of your e-mail address. If you go to http://google.com/profiles/me you will be redirected to the correct url that you can use to log in with OpenID.
> Did you know Google
> Did you know Google supports OpenID? By that, I mean did you know if you see a "Login using OpenID" box you can just throw your Google Mail email address at it. *Any* Google Mail email address! Even your company email address, if your company uses Google Apps.
Hmmm. Are you sure about that? The OpenID module distributed with Drupal 6 core provides a "Login using OpenID" box, but it does not appear to accept google email addresses.
Google's OpenID is not email
Google's OpenID is not email, but URL in format: https://www.google.com/accounts/o8/id
I have created Drupal module that allows users to login w/ OpenID "visually", i.e. by selecting Google's icon --> the module will then pass above URL to Drupal's OpenID module.
http://www.gerixsoft.com/blog/drupal/openid-selector
Correction!!
I'll update the post too. Doesn't seem to work with Google Apps accounts. My work email doesn't do it. I read somewhere it does, but didn't try it before posting and it doesn't.
Does work with any Google Mail domain account though.
Yup, 200% sure!
I assure you it does. I log in to this very site now using my Google Mail address with the Drupal 6 core OpenID module. Works absolutely fine.
What should happen when you either register or add OpenID identities to your Drupal account is you get taken to a Google-branded page the first time. Google will explain this is a third party site wishing to use your Google login and you say yes or no. After that it's all done. Google Mail address is your Drupal login.
OpenID Google - Good One!
Thanks for this tip - you've just converted another web - and Drupal - user to OpenID.
Wow!
Adrian
Open ID is Cool
Yah, it took me awhile also to fully get how powerful OpenID is, but now I use it a lot.
My next personal evolution in using the technology is to host my own open id via Drupal's Open ID Provider module. (There are a bunch of reviewed patches waiting to be committed; I'm waiting for those patches to get in.) I really like the idea of fully taking over my own identity on the Internet... in addition to the convenience of streamlined log-in. For the full identity control, I don't want to be dependent on Google or the other guys.
I'd love for you to unpack a bit more the use-case you describe in the post regarding the Haitti site. It sounds like you folks are sharing a user/1 account. Is that correct? And you've associated multiple openids with the user/1 account. The only way what you have done would make sense is if there has been a form alter done on user/1/edit so that password changes can't be implemented. Anyway... do explain further.
Great job on the Haitti site... very important work.
Post new comment