5 ms·

> My only complaint is the name of OpenID Connect is simply confusing. Yea..many people only remember the failed OpenID 1 & 2 specs...so, out-of-the-box there

> My only complaint is the name of OpenID Connect is simply confusing. Yea..many people only remember the failed OpenID 1 & 2 specs...so, out-of-the-box there is some developer fatigue associated with Connect. However, federation standards have proven to be pretty sticky--SAML was written 10+ years ago. Hopefully as Connect continues to be developed, marketed, and implemented by developers, it will over shadow previous unsuccessful versions of the protocol.

philips 10y ago
I have just started saying OIDC as that has no fatigue attached to it. And then if people want clarification I explain the whole silly naming story.
user5994461 10y ago
Don't confuse OpenID and OpenID Connect. They are very different things.
- pyvpx 10y ago
  with very similar names?
  - user5994461 10y ago
    They shouldn't have had similar names. This is causing a lot of confusion ^^
    - nailer 10y ago
      OpenID has a bad enough reputation amongst developers - with the user being asked to remember bizarre URLs - that I'm surprised they kept the name.
idm_guru 10y ago
It's no more confusing then LDAP. First there was LDAP 1.0, 2.0, now we all use 3.0... OpenID 2.0 is deprecated. Don't use it. The current OpenID authentication protocol = OpenID Connect. In the not too distant future, no one will even remember that something called OpenID 2.0 existed. Maybe OpenID Connect should be OpenID 3.0? I think the idea was to show alignment with Facebook Connect's design...but more open. Remember, at the time Facebook Connect provided some good data--it was a massive user acceptance test. IMHO, the blame lies with the OIDF for not delivering this message. OpenID Connect has been final for 4+ years. What's taking so long? Maybe it's not in the interest of the OIDF's controlling board members to promote this distributed identity infrastructure? MSFT wants you to use Azure AD. Google wants you to use their IDP. Maybe they don't want to promote until they have product ready? Stay tuned... I think when it's in the interest of the current finanical backers of the OIDF to promote OpenID Connect, no one will remember that old OpenID 2.0 thing.
WorldMaker 10y ago
There's also a flipside too: those of us that remember the original community grassroots spirit and attempted simplicity of early OpenID and feel like OpenID Connect misses a lot of the old point of OpenID, and definitely a lot of the intended simplicity.

philips 10y ago

I have just started saying OIDC as that has no fatigue attached to it. And then if people want clarification I explain the whole silly naming story.

user5994461 10y ago

Don't confuse OpenID and OpenID Connect. They are very different things.

pyvpx 10y ago
with very similar names?
- user5994461 10y ago
  They shouldn't have had similar names. This is causing a lot of confusion ^^
  - nailer 10y ago
    OpenID has a bad enough reputation amongst developers - with the user being asked to remember bizarre URLs - that I'm surprised they kept the name.

idm_guru 10y ago

It's no more confusing then LDAP. First there was LDAP 1.0, 2.0, now we all use 3.0... OpenID 2.0 is deprecated. Don't use it. The current OpenID authentication protocol = OpenID Connect. In the not too distant future, no one will even remember that something called OpenID 2.0 existed. Maybe OpenID Connect should be OpenID 3.0? I think the idea was to show alignment with Facebook Connect's design...but more open. Remember, at the time Facebook Connect provided some good data--it was a massive user acceptance test. IMHO, the blame lies with the OIDF for not delivering this message. OpenID Connect has been final for 4+ years. What's taking so long? Maybe it's not in the interest of the OIDF's controlling board members to promote this distributed identity infrastructure? MSFT wants you to use Azure AD. Google wants you to use their IDP. Maybe they don't want to promote until they have product ready? Stay tuned... I think when it's in the interest of the current finanical backers of the OIDF to promote OpenID Connect, no one will remember that old OpenID 2.0 thing.

WorldMaker 10y ago

There's also a flipside too: those of us that remember the original community grassroots spirit and attempted simplicity of early OpenID and feel like OpenID Connect misses a lot of the old point of OpenID, and definitely a lot of the intended simplicity.