The OpenID Foundation is hosting an OpenID workshop in London, UK on March 28, 2012. Co-sponsored by Google and Microsoft, this event will be held at Microsoft’s offices. Come hear Janrain’s Director of Products, Vidya Shivkumar, discuss how our customers have successfully deployed social login through use of popular standards such as OpenID and OAuth to get more than just an email address from the user. In fact, organizations are increasingly experiencing the value from leveraging profile data that can be accessed through social login authentication.
On March 13, in adhering to our goals of making powerful consumer directed identity standards such as OpenID, OpenID Hybrid and OAuth consumer friendly, Janrain participated on a panel that discussed healthy trade-offs between usability, privacy and security for online consumers adopting third party authentication. The panel was part of the 2012 NSTIC/IDTrust Workshop, that featured presentations and panel discussions by leading identity management and standards experts who addressed a wide range of topics that surround identifying and implementing the four NSTIC Guiding Principles in the Identity Ecosystem, including:
- Identity Solutions will be Privacy-Enhancing and Voluntary
- Identity Solutions will be Secure and Resilient
- Identity Solutions will be Interoperable
- Identity Solutions will be Cost-Effective and Easy To Use
One of key takeaways was that Identity Ecosystems need to be designed with user experience in mind, which is more than picking the correct font size or layout. Transparency around how a user’s data will be used by a website or organization needs to be front and center on a registration page rather than be buried deeply in a Terms of Use policy.
The good news is that, in order to achieve disclosure and transparency online, organizations do not need to reinvent the wheel. Social networking providers such as Facebook, Twitter, LinkedIn, Google and others have pioneered disclosure through the use of end-user permission screens requesting lawful transfer of their data to 3rd party websites. Brands and organizations need to look no further than to embrace best practices for the benefit of their end users.
