Integrating openid authenticiation into a php application - php

I want to integrate openid authentication into my php application. It must support authentication from yahoo, google, aol, msn/hotmail/live (not sure if its support openid).
I have tried searching google and have been able to come up with anything useful. I will really appreciate advises and links to good tutorials.
Thanks in anticipation.

This looks like a pretty solid tutorial covering the Google part.
Googling for 'php openid implementation tutorial' yields lots of relevant links.
Good luck!

Take a look at Janrain Engage. With the free version you can choose 6 different providers.
EDIT:
They provide an single API for authentication using OpenID and other authentication methods. Services like Twitter, Facebook and Windows Live don't use OpenID but some other method (i.e. Twitter uses something based on OAuth). Instead of implementing every method yourself you can use one single unified API.

Related

How can Google account credentials by applied to my PHP app (SSO)?

I have a PHP application that will be accessed by users who are already
signed into Google ( the app runs in an iFrame on a Google Site that
requires Google login)
What is the best SSO approach that uses Google login, so users have
the same identity in both places?
Best to use a some OpenID opensource? .. zend/cake/symf plugin?
GoogleApps infrastructure? .. or a identity service like Janrain?
Is it too early to go with OpenID Connect? etc.
Thanks much.
OpenID works well - and indeed, is good enough for StackOverflow - you probably used it to register your account here.
There's an article called Getting Started with OpenID. Although it's on Zend's website, it doesn't seem to be tied to the Zend framework, so is a good starting point. It covers all the modules you need to download, and includes an example to help get you started.
Also take a look on simplesamlphp and its integration with Google:
Setting up a simpleSAMLphp SAML 2.0 IdP to use with Google Apps
Is an open source project based on php. Nice comunity and complete documentation.
Hi again I recently discovered this interesting project HybridAuth, an SSO PHP Library for authentication through identity providers like Facebook, Twitter, Google, Yahoo, LinkedIn, MySpace, Windows Live, Tumblr, Identica, LastFM, OpenID, PayPal, Vimeo, Foursquare, AOL, Viadeo, and others.
I didnt test it but seems also a good solution.

How to discover OpenID IDP, then authenticate with OpenID Provider in PHP

I've been looking at implementing OpenID authentication to one of my websites and want to find the best possible solution to make it as easy as possible for users to sign up / in.
Through my long searches on Google I found a few sites that have already covered this in quite a bit of detail; Usability Research on Federated Login written by Google, so feel that they are pretty trustworthy design patterns for a best use scenario.
Now in coming to implement this I have found very little PHP support for logins that are done in this manner; the user only has to type in an email address and all of the OpenID details are found automagically. It should also be compatible with Google Apps addresses.
Google provided a link to a great example of this in action http://www.puffypoodles.com/lso2 but although its source code is available to download, it's written in Java, which I'm far from familiar with!
So I was wondering if anyone had found a good PHP implementation that functioned in this manner. php-openid seems too bloated, lightopenid looks great, but doesn't support this functionality.
Thanks
I'd just like to point out that LightOpenID now comes with an example provider script you might use as a base.

Authentication versus Google, Facebook, Twitter with community SDK

we're developing one service to be integrated with various social networks and would like to allow users to be authenticated with their facebook-google-twitter-etc accounts in a simple one-click way.
Most of the huge network providers permit to do it with their proprietary APIs, but for small group of programmers as we are to support all of them is very difficult problem.
We are searching for some community project which implements most of the proprietary API authentication methods to be included in our small website.
The developing language is not of huge importance, but it would be great to find one written in PHP.
Thank you.
Maybe this is something you're lookin' for:
https://rpxnow.com/
They also have a free priceplan, and a paid one to access the noticed API's for some cool data.
Recently I've found some more socialauth applications
The HybridAuth Lib: http://hybridauth.sourceforge.net/
The SocialAuth: http://code.google.com/p/socialauth/
The DotNetOpenAuth: http://www.dotnetopenauth.net/

How to add OpenID to a php site?

I absolutely love StackOverflow's usage of OpenID for registration. How would I go about adding this to my site? It is PHP based. I went to openid.net and looked at the libraries there, but could find little in the way of documentation or examples.
This tutorial was helpful for a previous project I worked on using PHP and OpenID. It has an example app.
http://devzone.zend.com/article/3581
(source: zend.com)
Documentation and examples.
OpenID is great, but have one big disadvantage. Let's imagine that I'm having Google account and Yahoo account. I will login using Google and then I will try to login using Yahoo. And it will be different accounts; it's really difficult to remember what openID provider I was using for registration... So, be careful with OpenID on entertainment websites, but it is still ok for developers websites.
Check OpenId class from Zend Framework.

Common interface for different OpenID providers and Facebook

Is stack overflow using https://rpxnow.com/ for login in using different services? If so, is it good, and does it have good (preferable free, preferable with PHP API) alternatives?
What I'm looking for is a login page which would allow users to login using major web open-id providers + Facebook connect.
No, StackOverflow does not use RPXNow. And if you choose to use it be careful to avoid its pitfalls.
I suggest you just accept OpenID, which covers many, many Providers (who uses Facebook but doesn't use one of Google, Yahoo, and (soon) Microsoft?). Besides, I expect as an OpenID supporter, Facebook will eventually become an OpenID Provider too. So I suggest you save yourself the trouble and just support OpenID using one of the PHP OpenID libraries since that is your language.
i remember signing up for RPX and being able to easily find a PHP example on their site.
Also, I don't believe stack overflow uses that, but i could be wrong
For completeness, www.clickpass.com is very similar to RPXNow. However, it also has it's detractors. http://notsorelevant.com/2008-03-11/clickpass-i-dont-get-it/

Categories