Integrate with OpenID authentication
Users often work with multiple web applications, requiring multiple IDs and passwords. This requirement can be difficult to maintain. To create a relationship between an identity providers such as Google, Yahoo, Twitter, or Facebook, WebSphere Portal uses OpenID and OAuth.
OpenID provides decentralized user management. Users can select an identity provider to host their profile information, including user ID and password.
- Google and Yahoo use OpenID.
- Twitter and Facebook use OAuth.
WebSphere Portal provides a trust association interceptor that handles the communication between identity providers and Portal as the service provider. WebSphere Portal trusts the identity provider and grants the user entrance.
Options to integrate external users into the WebSphere Portal environment:
- Require an existing binding between a local Portal account and a remote identity provider account.
Provides ability to request additional validation from the users, and to have internal accounts for the users. The binding is stored in a user attribute, which requires a writable user repository.
- Give all users of an identity provider access to your Portal environment as an identified user.
We grant special access rights to these users without requiring them to register with WebSphere Portal.
To configure identity providers...
- Configure OpenID authentication
- Modify the list of OpenID providers
- Configure transient users
- Disable transient users and OpenID authentication
Parent Securing