1. OpenID Connect
via WebIntents
@nov

2. NASCAR Problem

3. Discovery Issue

7. Discovery on SmartPhone
• iOS
• Custom Schema Delegation
• Android
• android.content.Intent Class
• Windows Phone
• I’m a Mac user

8. Discovery on SmartPhone
• iOS
• Custom Schema Delegation
• Android
• android.content.Intent Class
• Windows Phone
Discovery + Inter-app communication
• I’m a Mac user

9. Discovery in HTML5
=> WebIntents

10. delegatee.example.com

11. delegatee.example.com
Register a delegatee for “share” action

12. You share now.

13. delegator.example.com

14. delegator.example.com
Invoke “share” action delegation

16. delegatee.example.com

17. delegatee.example.com
Respond to delegator

18. http://demos.webintents.org

19. More details?
http://webintents.org

20. OpenID Connect Discovery
via WebIntents

22. End-User RP OP
Initiate
Discovery
Client Registration
Authorization Request
Code / Access Token / ID Token
UserInfo

23. OP (delegatee)
$ https://connect-op.heroku.com
RP (delegator)
$ https://connect-rp.heroku.com

24. What should be standardized?
Intent Action Value

25. What should be standardized?
Response is not
a simple JSON document

26. APPENDIX

27. End-User RP OP
Initiate
Discovery
Client Registration
What should
Authorization Request be delegated??
Code / Access Token / ID Token
UserInfo

28. In WebIntents,
no direct communication happens
between delegator and delegatee.
They won’t know each other.

29. End-User RP OP
Initiate
Discovery
Client Registration
Authorization Request
Code / Access Token / ID Token
UserInfo