Re: [Zope-dev] Single Sign On

Gary Poster wrote:

We use the OpenID 2.0 identifier select URL. This is a special OpenID url that basically means: identity using whatever ID you have on that server.

The OpenID response will contain the actual OpenID identifier of the user at the end of the request.

So sites that we integrate in our SSO simply sends you to Launchpad for authentication and then uses the returned identifier to link with their local account representation. We also use sreg (Simple Registration) to transfer information about the account to the integrated sites, so that they can update their local account representation with the central data.

I see now! Thanks, Francis and Gary. Shane