George's dashboard

Hi Andrea,

Could you please post a screen shot of the problem you are seeing. There should be no OpenID integration on http://mail.aol.com (or the associated authentication page). I just logged into my AOL account using safari 4 and didn't see any popup OpenID window.

Thanks,
George

P.S. We should take this off this list. You can dm me on twitter at gffletch.

Yes and no:) If I know the person's OpenID, it would be nice to be able to enter it so that when they log in they don't have to wait for me to go through the "connection" process. For example, if my friend is alice@example.com and I know that example.com uses OpenID's of http://alice.example.com then I'd like to be able to add that directly and assign her to a Persona. If for some reason she logs in with a different OpenID then the existing flow works find and I can merge accounts after the fact.

I find that I'm doing a lot of the "merging contacts" because I have a contact already and then they log in with their OpenID (which I sometime know ahead of time) and now they have two different contact entries (until I merge them). I do really like the merge contact feature though. That works well:)

Thanks,
George – George, on January 30, 2009 20:51

I would like to be able to import all facebook data into a specific persona. If that persona is "Public" then it would appear on the dashboard. Or else, provide the same Persona import assignment capabilities as used with other imported services.

SAML is about identity assertions, identity attributes and identifier federation. The SAML assertions are often used in web services calls as the mechanism to securely identify the identity in the transaction. OAuth is less about identity federation and more about a simple HTTP based identity web service invocation framework. If you were to equate OAuth to something in the SAML "sphere" it would be the Liberty ID-WSF 2.0 specification.

The value of the simple HTTP based framework is that it is much easier to integrate into AJAX and "widget" based applications. Trying to parse and manage SAML and SOAP based XML in Javascript, while not impossible, is not the normal developer programming model.

Finally, I believe that it is possible to combine both SAML and OAuth such that a relying party that supports OAuth for identity web services, and SAML for authentication and federation, could use SAML assertions and artifacts as the token and keys used in the OAuth protocol. [Note, I have not mapped this out in detail]