Re: [eid-applet] e-ID website authentication

[Frank Cornelis]

Hi Tom,


OpenID is just the protocol, like SAML and WS-Federation is.
The eID IdP supports OpenID as authentication protocol. Unlike other (OpenID) Identity Providers, you don't have to register yourself with the eID IdP since we're using the eID card as trusted device (i.e., we already kind of know/trust you).

So basically you just have to integrate the eID IdP via OpenID. The list of OpenID endpoints is available at:
https://www.e-contract.be/eid-idp/


Kind Regards,
Frank.

On 05/20/2013 03:31 PM, Tom Mestdagh wrote:

Hi,
 
My apologies if this is posted in the wrong group. But, I don't really see where else I could ask.
We would like to use e-ID cards to authenticate users on our website.   It's mostly meant for "power" users, so not everybody needs to be able to authenticate like this.   We do realize using the e-ID is still kinda hard and not really done, but we think it's one of the most secure ways of authenticating users and everybody has it.

What is the best way to go about it? 
If possible, we would rather use something else instead of java applets. 
Ideally we would like to use a REST API or some other kind of server API.  But maybe that's not possible for security purposes?
Our servers are Linux Debian based and our "power" clients are Ubuntu based.

Also I read something about e-ID working with OpenID.   What's that about?   I do understand what OpenID is, but I don't really see how it's used.  We make an OpenID account that is somehow signed with our e-ID cards?

 
Thanks,
Tom

--
You received this message because you are subscribed to the Google Groups "eID Applet" group.
To unsubscribe from this group and stop receiving emails from it, send an email to eid-applet+...@googlegroups.com.
To post to this group, send email to eid-a...@googlegroups.com.
Visit this group at http://groups.google.com/group/eid-applet?hl=en-US.
For more options, visit https://groups.google.com/groups/opt_out.