HelpOnOpenIDProvider - CBU statistics Wiki

Upload page content

You can upload content for the page named below. If you change the page name, you can also upload content for another page. If the page name is empty, we derive the page name from the file name.

File to load page content from
Page name
Comment
Type the odd letters out: ONlY twO thinGs aRE infiNite

location: HelpOnOpenIDProvider

MoinMoin as an OpenID Provider

Contents

  1. MoinMoin as an OpenID Provider
    1. Configuration
    2. Processing instruction
    3. Currently not implemented functionality

/!\ If you're looking for allowing log-in in to Moin using OpenID (Moin being an OpenID Relying Party), please see HelpOnAuthentication!

MoinMoin can be used as a flexible OpenID provider, allowing authentication with any of the existing authentication methods.

MoinMoin's OpenID provider code is very flexible, allowing various use cases. Generally, though, if the OpenID server is enabled, each user's homepage is also their OpenID. It is possible through a processing instruction, if permitted, to use any other page as the OpenID for a specific user if the page contains that processing instruction, see below.

Configuration

The OpenID server code supports several configuration variables that can restrict the way the wiki can be used as an OpenID provider:

Variable name Default Description
openid_server_enable_user False If True, the OpenIDUser processing instruction is allowed.
openid_server_enabled False True to enable the built-in OpenID server.
openid_server_restricted_users_group None If set to a group name, the group members are allowed to use the wiki as an OpenID provider. (None = allow for all users)

Processing instruction

The new processing instruction OpenIDUser is enabled depending on the configuration, its only argument must be a username, for example "#OpenIDUser SomeUserName". When this instruction is used, Moin will also allow using that particular page as an OpenID URL for the given username. However, note that this form of the processing instruction can never override the default so it cannot be used on another user's homepage.

Currently not implemented functionality

The OpenID server code is not perfect, it could

  • implement attribute exchange,

  • be an IDP so users can enter just http://wiki.example.com/ and choose their identity by logging in,

  • allow delegation, would be easy to do with a new user preferences plugin (and a new configuration option openid_server_enable_delegation)