EXT: OpenID Authentication

Extension Key: openid

Copyright 2000-2008, Dmitry Dulepov, <dmitry@typo3.org>

This document is published under the Open Content License

available from http://www.opencontent.org/opl.shtml

The content of this document is related to TYPO3

- a GNU/GPL CMS/Framework available from www.typo3.org

Table of Contents

EXT: OpenID Authentication	1

Introduction	3

What does it do?	3

Screenshots	3

Users manual	4

Administration	5

Configuration	6

ChangeLog	7

Introduction

What does it do?

This extension provides OpenID authentication for the Frontend and Backend. OpenID allows to authenticate on many web sites using a single registration at the OpenID provider. There are several OpenID providers on the Internet. Such major companies and sites as AOL, Blogger, Flickr, LiveJournal, Technoratti and Yahoo provide OpenID services (the full list can be found here). Once registered with one OpenID provider, user can use his OpenID on any OpenID–enabled web site.

Screenshots

TYPO3 uses the same login forms for standard and OpenID authentication. When user enters his OpenID, he is transferred to the OpenID provider web site, where he should confirm his intention to authenticate with TYPO3 web site. OpenID provider can ask for the password. After conforming user is transferred back to the TYPO3 web site. Here is how Yahoo OpenID screen looks like:

This screenshot was taken on the developer's computer. Here Yahoo warns that site is not possibly trustful.

Users manual

There are no user–configurable options for this extension. Once installed OpenID authentication becomes available to users automatically.

When using OpenID for authentication, user needs only to write his OpenID in the “User name” field. The password box is ignored when using OpenID. If login form requires a password, user can type any random sequence of characters there. These characters will not affect OpenID authentication.

Normal authentication works in parallel with OpenID authentication: user can use OpenID or their normal TYPO3 login. Administrators can force users to use OpenID only by generating random long passwords for users.

Administration

Extension should be installed as usual using TYPO3 Extension Manager. Notice that this extension can work only as system extension. It requires at least TYPO3 4.3 and PHP 5.2.0.

After installation OpenID identifier should be added to the Frontend and Backend user records who need to authenticate themselves using OpenID. See “Configuration” section later in this manual for more information.

Configuration

Frontend and Backend users can login using OpenID only and only if they have OpenID configured in their records. Frontend users have OpenID field as a secondary option (palette) to the regular user identifier:

Backend users have their OpenID below the regular user identifier:

User identifiers must follow certain rules.

Identifiers for Backend users must be unique in the whole database. If identifier is not unique, TYPO3 will silently add a number to the newly added OpenID thus ensuring that only one user has that OpenID. The duplicate OpenID will become invalid.

Identifiers for Frontend users are unique within page. Two users on the same page may not have the same OpenID. But two users on different pages can have the same OpenID.

ChangeLog

See “ChangeLog” file in the TYPO3 core root directory.

EXT: OpenID Authentication	ChangeLog

7

EXT: OpenID Authentication

Dmitry Dulepov

2008-09-24T23:30:27