Off the Shelf provides a platform for Retailers and Consumer Packaged Goods companies to discuss and gain insights on the pressing problems, trends and solutions.

« Non-retailers E-tailing | Main | Why is my Web Site Slow? »

Whats in an ID ?

I am sure that most of you would have a large number of online user ids and passwords – each uniquely identifying you, as a user. While some of those identities have just your name and an email address associated with it (for example, a Gmail® or yahoo® id), some others contain large amounts of information (name, date of birth, addresses, payment information, etc) about you contained within them. Examples are your google checkout® account, PayPal® account or an account that you have created with your favorite online merchant. In effect, you are left with a ton of user ids and passwords, each one of them meant to uniquely identify you – the single and unique you. So aren’t we creating too many identities?

 

One obvious problem with having so many identities is that you have to remember their passwords and other credentials (unless you have the habit of using the same user ids and passwords everywhere – which is another problem altogether). The next ‘not so obvious’ problem is that of keeping your information current. When you move, or when you start using a new email address, would you like to log on to each of these accounts and update information? The third aspect is the time that you have to spend to register on every new website with which you have some business to do with – may be to buy something, may be to join on a discussion about a product that you have or may be to network with people. Not sure if you would share the same experience – I have decided not to interact with some sites only because of the pain of creating a new user profile. Having thought about the problems of having so many profiles for a person, I begin to wonder – doesn’t this problem exist in the real, physical world? Certainly it does. You fill out a different form to join each of the loyalty programs, to open each bank account and so on. But then everything online should be slightly better (at least) than the physical world –that is what I believe in. From the way things are evolving, looks like we are getting better at this.

 

Today, there exists a movement called openID (http://www.openid.net) which aims to clean up online identity management. Before explaining the concept, let me tell you who all has signed up. Google®, Yahoo!®, Facebook®, AOL®, Microsoft®, Verisign® and Sun® are some of the prominent members –this list should tell you a bit about the acceptability of this idea. This movement started as early as 2005, but it is only now that the big players are taking notice. Let me explain the idea - openID is an online identity which will have an associated password. There will be a set of websites called as openID providers who will be issuing these identities. Google® and Yahoo® are good examples. There will be a set of websites which allows users to use their existing openIDs without having to register and create profiles separately. Such websites are known as openID accepting sites. An important aspect is that the accepting websites never get to see the openID credentials that are used. They would want to know the user id (so that they can use the same to identify the customer in the future as well). They can also request for other information – like name, address, etc to be shared by the openID provider. There is no standard set of information (yet) that you can expect from an open id provider that is still evolving. For example, Google would only share name and email while AOL shares date of birth in addition. So the single openID ends up being your unique online identifier.

Want to see this working? That is easy to do. I will show what happens when an openID holder (most of you would be one) visits an openID accepting website. I will be using my Gmail id as the openID and the accepting site is the MySears community website. I start by visiting the login page - https://www.mysears.com/login

 

In the login page, you have the usual login form. In addition you can see some options on the right side. Shown there are some of the most popular id providers. If you have a user id at any of these sites, you do not have to register! You can just click on any of them. In our example, I choose to click on the Google® icon.

Gmail Login

I am taken to the Google website and the familiar Google login form is displayed. However, there is a message on the page which tells that MySears is asking to share some information. Since I did this on purpose, I provide gmail credentials. Please note that MySears does not get to see my password.

Confirmation

Once I sign in, Google tells me that MySears is asking for my email and Name. I chose to allow and also checks the ‘remember this approval’ box (so that I do not have to approve the next time). Once I do that, I am transferred back to the MySears website and I am logged in! Please note that during the first time that you use an openID to sign in, MySears asks for some additional information like zip code (which is specific to MySears since that site requires some additional information to work than what Google has).

openID logged in

This was a very trivial and simple example and the only attribute shared is my email. Still I would never have to remember a user id and password for this site. Isn’t that a good starting point? I am excited to say that we already have created working openID integrations with some of the leading ecommerce products. This would mean that an online business which is using one of these products will be able to become an openID accepting site. Other than solving some of the problems described earlier, there is much more to gain for an online business which can act as an openID acceptor. Let us discuss that a later point in time or maybe you can start listing the obvious ones by commenting…

 

 

 

TrackBack

TrackBack URL for this entry:
http://www.infosysblogs.com/apps/mt-tb.cgi/5252

Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)

Please key in the two words you see in the box to validate your identity as an authentic user and reduce spam.

Subscribe to this blog's feed

Follow us on

Blogger Profiles

Infosys on Twitter