Everything about OpenID
Open and decentralized authentication protocol standard
OpenID is an open standard and decentralized authentication protocol promoted by the non-profit OpenID Foundation. It allows users to be authenticated by co-operating sites using a third-party identity provider (IdP) service, eliminating the need for webmasters to provide their own ad hoc login systems, and allowing users to log in to multiple unrelated websites without having to have a separate identity and password for each. Users create accounts by selecting an OpenID identity provider, and then use those accounts to sign on to any website that accepts OpenID authentication. Several large organizations either issue or accept OpenIDs on their websites. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: OpenIDA 5-minute orientation
- Skim a recent paper: Save The Implicit Flow? Enabling Privacy-Preserving RP Authentication in OpenID ConnectInfluential work since 2022
- Pick up a classic book: Prove What LeavesThe most-reprinted book on the subject
- Read the landmark paper: Understanding and mitigating OpenID Connect threatsCited 37 times
- Go sideways: XRDSA closely related topic
- Go sideways: OAuthA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🏆 Landmark papers (most cited)
Understanding and mitigating OpenID Connect threats
Systematically breaking and fixing OpenID security: Formal analysis, semi-automated empirical evaluation, and practical countermeasures
A Novel Secure and Privacy-Preserving Model for OpenID Connect Based on Blockchain
Towards the integration of reputation management in OpenID
Assessment of Secure OpenID-Based DAAA Protocol for Avoiding Session Hijacking in Web Applications
OpenID Connect as a security service in cloud-based medical imaging systems
Formal Security Analysis of the OpenID FAPI 2.0 Family of Protocols: Accompanying a Standardization Process
Identifying an OpenID anti‐phishing scheme for cyberspace
🆕 Influential since 2022
Save The Implicit Flow? Enabling Privacy-Preserving RP Authentication in OpenID Connect
Detecting Risky Authentication Using the OpenID Connect Token Exchange Time
OIDC²: Open Identity Certification With OpenID Connect
Comparative Analysis of the Performance of Single Sign-On Authentication Systems with OpenID and OAuth Protocols
Streamlining Plug-and-Charge Authorization for Electric Vehicles With OAuth 2 and OpenID Federation
📚 Books worth reading
Prove What LeavesRavi Vale · 2026
The Road To Microservice ArchitectureRaymond Pairan
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- XRDS The extensible resource descriptor sequence (XRDS) is an XML-based file format that provides a list of services. The XML format used by XRDS was originally…
- OAuth OAuth (version 1: RFC-5849, version 2: RFC-6749; sometimes incorrectly extended to open authorization) is an open standard for access delegation, commonly…
- Single sign-on Single sign-on (SSO) is an authentication scheme that allows a user to log in with a single ID to any of several related, yet independent, software systems…
- Identity provider An identity provider (abbreviated IdP, IDP, or idp) is a system entity that creates, maintains, and manages identity information for principals and also…
- Social login Social login is a form of single sign-on using existing information from a social networking service such as Facebook, Twitter or Google, to login to a…
- SAML Security Assertion Markup Language (SAML, pronounced SAM-el, /ˈsæməl/) is an open standard for exchanging authentication and authorization data between…
- Mozilla Persona Mozilla Persona is an obsolete standard for decentralized authentication infrastructure for the Web. Built upon the new BrowserID protocol prototyped by…
- List of OAuth providers This page is a list of notable OAuth service providers. List of single sign-on implementations Hotmail, Windows Live, Messenger, Entra ID (formally Azure…