Hacker News new | ask | show | jobs
by manigandham 2548 days ago
No, OIDC providers can only be accessed by registered clients so those sites cant use your provider unless they specifically add it. Otherwise you would be able to login with any of those accounts on any site already.
1 comments

Ok, so there really isn't anything like OpenID any more?
OpenID still required sites to implement that standard as a relying party so it couldn't be used arbitrarily. It gave you the ability to choose a specific OpenID identity provider to store your account info (including your own), but it didnt get adoption so now it's obsolete.

OpenID Connect is the latest version of OpenID, and it uses OAuth to federate access to other identity providers but sites now have to implement a separate registration for each provider (google, facebook, etc) so what they choose to implement is what you get, and there's no realistic option to use your own.

Thanks, the TL;DR is "Yes" then. Too bad.