Choices, choices, choices: CAS or OpenID?

Sunday, May 11th, 2008

With RubyCAS and Ruby-OpenID you have two choices to enable authentication for your application.
But which choice is the best one? Or rather the correct one? That depends on your usage scenario.
RubyCAS and OpenID solve, roughly, two different problems:

Single Sign On
User account management

Solving the Single Sign On problem
This is RubyCAS’ strength. If you want to offer [...]

Wide OpenID. SSO for the user.

Tuesday, May 6th, 2008

OpenID. Doesn’t that sound wonderful? It is open. Right there in the name it says that it is! And it is about IDs, too! Er, wait. What is it?
OpenID is an open standard that is not vendor controlled. That is, neither Google, nor Microsoft, nor Apple could change the nature of the standard and ‘neglect’ [...]

A case for CAS

Sunday, May 4th, 2008

A couple of days ago, I talked about the limited options of SSO on the Ruby side of things. This turned out to be a bit of a mistake. In fact, the two viable SSO solutions are viable, and feature rich, providing what you need on the authentication server’s side, as well as the client’s [...]

Why have thee forsaken me, oh SSO?

Thursday, May 1st, 2008

Image via Wikipedia
As I’ve talked about before, I’ll talk about the requirement gathering first.
Currently, I’m looking into SSO solutions on *NIX like systems. Which is a certainly interesting field (lots of commercial vendors, in case you need somebody to sue, as Justin Gehtland put it in his RubyConf ‘07 presentation Ruby and Identity: OpenID, CAS [...]