Provider Comparison

Standards / Protocols:

• SREG is supported
• OpenID 2.0 is supported

Login:

• Username/password
• Certificates
• Information Cards
• Two-factor authentication by using phone number which the user specifies (CallVerifID)

Security / Phishing:

• SSL secured transfers
• SeatBelt
• Provider Authentication Policy Extension
• SSL certificate
• Personal image
• No sign-in on landing page
• Audit log for users to view all their activities

Miscellaneous / Future

• Customized OpenIDs for organizations to provision for customers, employees, or affinity members
• Affiliate program available for relying parties
• Supports multiple personas
• Public profiles are marked up with hCards
• Support for MicroID, and Attribute Exchange
• Supported by ID Selector

Probably out of business soon (see our coverage)!

Standards / Protocols:

• SREG is supported
• OpenID 2.0 is supported as well

Login:

• Two-factor authentication by using image categories which the user specified

Security / Phishing:

• SSL secured transfers
• EV certificates
• Customizable notifications (can be used to set alarms when someone tries to login to a user’s account)

Miscellaneous / Future

• Supports multiple personas, protected from indexing by search engines
• Password manager for Firefox (compatible with Firefox 3)
• Partner program for relying parties
• Microformats enabled public profile page
• Supported by ID Selector
• Pavatar support
• FOAF support in the future

 

(OpenID.ee)

This is an Estonian provider which uses the Estonian identity card (eID) and Mobile-ID SIM cards for identification and authentication.

Standards / Protocols:

• Partial support of SREG (full name, gender, date of birth).
• OpenID 2.0 is supported.

Login:

• eID smart cards
• WPKI SIM cards (smart cards)

Security / Phishing:

• All transfers are SSL (no HTTP at all).
• SeatBelt
• Authentication methods are phishing resistant. Man-In-The-Middle attacks are possible but phishing is not.
• Provider Authentication Policy Extension

Miscellaneous / Future

• No support for multiple personas but personal data filters for different sites which are stored privacy settings for age-gender-fullname.
• Support for microformats will be added on public profiles.
• Planned support for One-Time-Password authentication for Java mobile phones.
• Anonymous identifiers for every interaction between the provider and Relying Party; kind of disposable OpenIDs.

Pages: 1 2 3 4 5 6 7