microsoft
Report a problem

Windows Live to act as OpenID provider

Marshalus   on 30 October 2008 - 14:44 · 24 comments & 8341 views

Advertisement (Why?)
In July of last year, Microsoft threw its weight behind supporting the OpenID protocol. In February of this year, Microsoft joined the OpenID foundation's board. Now, Microsoft has committed to OpenID further by announcing that Windows Live will become a OpenID provider and that you will soon be able to use your Windows Live ID account to sign in to any OpenID enabled website.

OpenID is a distributed authentication method for allowing users to securely use a single digital ID to sign into multiple websites on the Internet. AOL and Yahoo already allow users to authenticate against their AOL or Yahoo credentials on sites using OpenID. Google so far has not adopted OpenID through any supported means.

Currently Microsoft's OpenID implementation is on their Windows Live ID Integration environment, intended for sites and software providers who provide OpenID authentication to test against the service. Your normal Windows Live ID cannot currently be used for OpenID. Microsoft does not seem to have any plans to allow the use of your OpenID to login to sites that require a Windows Live ID. Meaning you'll still need to maintain accounts at Yahoo, AOL and Windows Live to login to services on their individual sites. However, in becoming a provider, Microsoft has taken a step in the right direction towards opening up their services.

Microsoft has given no specifics on when they plan to make OpenID authentication available on their public servers.

View: Sign-Up for Testing

Post a comment · Send to friend Comments · There are 24 additional comments
(1 reply) #1 PureLegend on 30 Oct 2008 - 15:02
It's good but until these companies actually allow signing in with OpenID credentials it's all futile.
#1.1 Antaris on 30 Oct 2008 - 15:12
Very true, these new technologies are great, but until developers can actually put them to use for consumers, they will just go stale in the fridge...
#2 Luis.A on 30 Oct 2008 - 15:18
Hummm I believe ustream.tv is an early adopter of Openid. Anyways, lets hope the industry responds. Services need to be unified not segregated.
#3 +M2Ys4U on 30 Oct 2008 - 15:31
The problem with OpenID is that is passing the buck for authentication, but passing the buck to someone you can't trust.

Good in theory, impossible in practice.
(2 replies) #4 Magallanes on 30 Oct 2008 - 15:43
do you remember msn passport?.

#4.1 tiagosilva29 on 30 Oct 2008 - 15:54
Yeap... and MSN Chat...
#4.2 Antaris on 30 Oct 2008 - 16:21
MSN Passport IS Windows Live ID
#5 +TCLN Ryster on 30 Oct 2008 - 15:51
What we need is an easily adoptable SDK for the OpenID system that regular web developers can integrate into their own sites. That should drive adoption.
(5 replies) #6 +shawncm217 on 30 Oct 2008 - 15:53
No, I don't 'remember' MSN Passport. I still use it. It's now called Windows Live ID. I still, to this day, do not understand why we can't just use that and not have OpenID at all.
#6.1 theyarecomingforyou on 30 Oct 2008 - 16:51
So you'd rather have a Microsoft service than one supported and developed by all the industry's leading players?
#6.2 Antaris on 30 Oct 2008 - 17:35
The licensing costs for using Windows Live ID are quite steep, so startups often build their own authentication systems because it is cheaper to do so.
#6.3 GP007 on 30 Oct 2008 - 18:07
MS could just drop those fees or make them very cheap if they wanted to.

But that's not really the problem. Hell it could be free but other big companies like AOL and Yahoo etc would never use MSs service anyways. Price is not really the issue here when it comes to the big websites.
#6.4 +Smigit on 30 Oct 2008 - 20:58
theyarecomingforyou said,
So you'd rather have a Microsoft service than one supported and developed by all the industry's leading players?

I'd personally be happy to use a MS one to be honest. The thing is larger companies won't and while theres licensing fees smaller ones aren't going to be able to consider it.
#6.5 kaiwai on 02 Nov 2008 - 21:45
Smigit said,
I'd personally be happy to use a MS one to be honest. The thing is larger companies won't and while theres licensing fees smaller ones aren't going to be able to consider it.


Says the person who doesn't know the difference between a centralised versus federated system - and the fact that many of the partners weren't going to deal with a system which demanded that they (the partners) turn over their customer data wholesale and then purchase it back at a fee.

Microsoft is delusional if they though people would jump on passport given business reality. Customer data is an asset, and certainly not something to be given away to Microsoft then rented back at a fee each month/year.
(2 replies) #7 dandin1 on 30 Oct 2008 - 22:28
Great news! This is a major victory in the adoption of OpenID.
Microsoft's Passport system doesn't compare much to OpenID, since it was proprietary, closed and centralized. That's not very good for adoption, both implementor-wise and user-wise. In these respects, OpenID is the complete opposite.
The thing with decentralized authentication is that it's not feasable to allow anybody to magically be able to log in a large complex system. It works extremely well on blogs and forums, but you can't reasonably implement that on an e-mail or IM service. I don't expect Microsoft ever to allow signing in with an openID, but I don't (in response to PureLegend) beleive this is something that makes openID futile. Now everyone with an MSN address can use their credential to post on countless sites without having to register.
#7.1 thenetavenger on 31 Oct 2008 - 07:25
It actually is good news that MS is shoving their weight behind OpenID. MS was one of the first companies to push for a single Internet authenication system, and when everyone thought they were nuts, they started down the path with their own.

Jump forward several years were people see that MS wasn't so crazy and even though it is not the MS version that people put together, the concept they shoved down people's throats (via Messenger/Hotmail) for several years is now going to come to fruition.

So in a weird way, MS gets kudos for kickstarting the concepts and then kudos again for not shoving their version down our throats and jumping into the pool with everyone else instead.

Maybe the era of 'Gates' thinking is returning to MS and they are becoming a smarter kinder company again. (Yes I am NOT a fan of Ballmer thinking, or the drones that shove that thinking in some of their software that creates a lock-in mentality. And yes I remember a MS that was about giving users more for less and taking on the status quo.)

#7.2 +Echilon on 31 Oct 2008 - 18:23
thenetavenger said,
It actually is good news that MS is shoving their weight behind OpenID. MS was one of the first companies to push for a single Internet authenication system, and when everyone thought they were nuts, they started down the path with their own.

Jump forward several years were people see that MS wasn't so crazy and even though it is not the MS version that people put together, the concept they shoved down people's throats (via Messenger/Hotmail) for several years is now going to come to fruition.

So in a weird way, MS gets kudos for kickstarting the concepts and then kudos again for not shoving their version down our throats and jumping into the pool with everyone else instead.

Maybe the era of 'Gates' thinking is returning to MS and they are becoming a smarter kinder company again. (Yes I am NOT a fan of Ballmer thinking, or the drones that shove that thinking in some of their software that creates a lock-in mentality. And yes I remember a MS that was about giving users more for less and taking on the status quo.)

It certainly can't hurt.
(1 reply) #8 :: Lyon :: on 30 Oct 2008 - 23:43
and just yesterday I wrote on my blog that Google is joining the fun


#8.1 thenetavenger on 31 Oct 2008 - 07:27
I hope your blog includes the part about how Google is only using the newer version that breaks with compatibility and adding proprietary crap on top of that.
#9 Airlink on 31 Oct 2008 - 01:04
I do not like the idea that one company can become the clearing house for all internet login services.
(2 replies) #10 aalaap on 31 Oct 2008 - 03:20
"Google so far has not adopted OpenID through any supported means. "


Google lets you enable your Blogger blogs for use as OpenID identifiers. So, if I want, I can use http://aalaap.blogspot.com as my OpenID. This feature has been in place since January. Even though it needs a "labs" (Blogger in Draft) switch to enable, anyone can do it and it works just fine. More info: http://bloggerindraft.blogspot.com/2008/01...d-provider.html

Also, Blogger also lets you login with your OpenID (not necessarily from Blogger) to post comments on Blogger blogs. None of the others let you do anything with an external OpenID. And you're saying Google has not adopted OpenID through any supported means? Come on!

Last edited by aalaap on 31 Oct 2008 - 03:29
#10.1 thenetavenger on 31 Oct 2008 - 07:17
Ok, took a minute for a Goofan to jump out; however, even what little Google is using OpenID for is sad, and it gets worse.

Google has announced they are supporting OpenID, but not the version everyone else is using, nor will they allow backwards compatibility, and they also are adding in their own 'proprietary' features making their OpenID adoption USELESS outside of Google content.

Google is taking the place of IBM-MS, in the Giant/Evil corporate role. They are so hell bent on doing things THEIR way and even going around companies they hate, like MS, they are willing to screw over consumers in the process. -Besides people often forget they are a marketing and Ad company, not a solution provider and really don't care past advertising revenue and what products they can create to get people use their crap to leverage this.

-Read your GMail lately, its ok if you haven't, Google does it for you, so they know what advertising to shove at you to sell the information to their partners. (Test it, email Grandma a couple of times about a cool camera, and you will start seeing Web ads of companies selling that camera.)

#10.2 aalaap on 01 Nov 2008 - 17:46
Google's Blogger is still the only service amongst the biggies (AOL, Microsoft, Yahoo) that supports inbound OpenID support, nevermind that it's 1.1 instead of 2.0.
#11 m-p{3} on 31 Oct 2008 - 13:25
As long as they don't allow foreign OpenID accounts to connect to their system, the implementation is futile.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)