<?xml version="1.0" encoding="utf-8"?><!DOCTYPE article  PUBLIC '-//OASIS//DTD DocBook XML V4.4//EN'  'http://www.docbook.org/xml/4.4/docbookx.dtd'><article><articleinfo><title>HelpOnOpenIDProvider</title></articleinfo><section><title>MoinMoin as an OpenID Provider</title><para><inlinemediaobject><imageobject><imagedata depth="16" fileref="http://enec.org.br/moin_static1911/enec/img/alert.png" width="16"/></imageobject><textobject><phrase>/!\</phrase></textobject></inlinemediaobject> If you're looking for allowing log-in in to Moin using OpenID (Moin being an OpenID Relying Party), please see <ulink url="http://enec.org.br/HelpOnOpenIDProvider/HelpOnAuthentication#">HelpOnAuthentication</ulink>! </para><para><ulink url="http://enec.org.br/HelpOnOpenIDProvider/MoinMoin#">MoinMoin</ulink> can be used as a flexible OpenID provider, allowing authentication with any of the existing authentication methods. </para><para><ulink url="http://enec.org.br/HelpOnOpenIDProvider/MoinMoin#">MoinMoin</ulink>'s OpenID provider code is very flexible, allowing various use cases. Generally, though, if the OpenID server is enabled, each user's homepage is also their OpenID. It is possible through a processing instruction, if permitted, to use any other page as the OpenID for a specific user if the page contains that processing instruction, see below. </para><section><title>Configuration</title><para>The OpenID server code supports several configuration variables that can restrict the way the wiki can be used as an OpenID provider: </para><para><informaltable><tgroup cols="3"><colspec colname="col_0"/><colspec colname="col_1"/><colspec colname="col_2"/><tbody><row rowsep="1"><entry colsep="1" rowsep="1"><emphasis role="strong">Nome da variável</emphasis></entry><entry colsep="1" rowsep="1"><emphasis role="strong">Padrão</emphasis></entry><entry colsep="1" rowsep="1"><emphasis role="strong">Descrição</emphasis>False</entry></row><row rowsep="1"><entry colsep="1" rowsep="1">openid_server_enable_user</entry><entry colsep="1" rowsep="1"/><entry colsep="1" rowsep="1">False</entry></row><row rowsep="1"><entry colsep="1" rowsep="1">openid_server_enabled</entry><entry colsep="1" rowsep="1"/><entry colsep="1" rowsep="1">None</entry></row><row rowsep="1"><entry colsep="1" rowsep="1">openid_server_restricted_users_group</entry><entry colsep="1" rowsep="1"/><entry colsep="1" rowsep="1"/></row></tbody></tgroup></informaltable><!--The macro WikiConfigHelp caused an error and should be blacklisted. It returned the data 'If True, the OpenIDUser processing instruction is allowed.True to enable the built-in OpenID server.If set to a group name, the group members are allowed to use the wiki as an OpenID provider. (None = allow for all users)' which caused the docbook-formatter to choke. Please file a bug.--> </para></section><section><title>Processing instruction</title><para>The new processing instruction <code>OpenIDUser</code> is enabled depending on the configuration, its only argument must be a username, for example &quot;<code>#OpenIDUser SomeUserName</code>&quot;. When this instruction is used, Moin will also allow using that particular page as an OpenID URL for the given username. However, note that this form of the processing instruction can never override the default so it cannot be used on another user's homepage. </para></section><section><title>Currently not implemented functionality</title><para>The OpenID server code is not perfect, it could </para><itemizedlist><listitem><para>implement attribute exchange, </para></listitem><listitem><para>be an IDP so users can enter just <code>http://wiki.example.com/</code> and choose their identity by logging in, </para></listitem><listitem><para>allow delegation, would be easy to do with a new user preferences plugin (and a new configuration option <code>openid_server_enable_delegation</code>) </para></listitem></itemizedlist></section></section></article>