<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Wil Tan &#187; oauth</title>
	<atom:link href="http://dready.org/blog/category/oauth/feed/" rel="self" type="application/rss+xml" />
	<link>http://dready.org/blog</link>
	<description>musings on internationalized identifiers: domain names, OpenID, TLDs</description>
	<lastBuildDate>Sat, 10 Jul 2010 10:11:17 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Why be an OpenID Relying Party?</title>
		<link>http://dready.org/blog/2009/02/12/why-be-an-openid-relying-party/</link>
		<comments>http://dready.org/blog/2009/02/12/why-be-an-openid-relying-party/#comments</comments>
		<pubDate>Wed, 11 Feb 2009 18:20:52 +0000</pubDate>
		<dc:creator>wil</dc:creator>
				<category><![CDATA[data-portability]]></category>
		<category><![CDATA[oauth]]></category>
		<category><![CDATA[openid]]></category>
		<category><![CDATA[openstack]]></category>
		<category><![CDATA[portable contacts]]></category>

		<guid isPermaLink="false">http://dready.org/blog/?p=228</guid>
		<description><![CDATA[Plaxo&#8217;s Joseph Smarr presented the following at the OpenID Design Summit at Facebook HQ yesterday:
What an &#34;RP&#34; Wants
View more presentations from johnmccrea. (tags: #openidux josephsmarr)

This was a controlled experiment combining 3 technologies (2 of which from the Open Stack but hybridized) under the hood to create a streamlined signup experience that goes like this:

Someone at [...]


No related posts.]]></description>
			<content:encoded><![CDATA[<p>Plaxo&#8217;s <a href="http://www.plaxo.com/directory/profile/4294967299/7cca273a/Joseph/Smarr">Joseph Smarr</a> presented the following at the OpenID Design Summit at Facebook HQ yesterday:</p>
<div style="width:425px;text-align:left" id="__ss_1014050"><a style="font:14px Helvetica,Arial,Sans-serif;display:block;margin:12px 0 3px 0;text-decoration:underline;" href="http://www.slideshare.net/johnmccrea/what-an-rp-wants?type=presentation" title="What an &quot;RP&quot; Wants">What an &quot;RP&quot; Wants</a><object style="margin:0px" width="425" height="355"><param name="movie" value="http://static.slideshare.net/swf/ssplayer2.swf?doc=2009-whatanrpwants-1234302033849999-1&#038;stripped_title=what-an-rp-wants" /><param name="allowFullScreen" value="true"/><param name="allowScriptAccess" value="always"/><embed src="http://static.slideshare.net/swf/ssplayer2.swf?doc=2009-whatanrpwants-1234302033849999-1&#038;stripped_title=what-an-rp-wants" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="425" height="355"></embed></object>
<div style="font-size:11px;font-family:tahoma,arial;height:26px;padding-top:2px;">View more <a style="text-decoration:underline;" href="http://www.slideshare.net/">presentations</a> from <a style="text-decoration:underline;" href="http://www.slideshare.net/johnmccrea">johnmccrea</a>. (tags: <a style="text-decoration:underline;" href="http://slideshare.net/tag/openidux">#openidux</a> <a style="text-decoration:underline;" href="http://slideshare.net/tag/josephsmarr">josephsmarr</a>)</div>
</div>
<p>This was a controlled experiment combining 3 technologies (2 of which from the Open Stack but <a href="http://step2.googlecode.com/svn/spec/openid_oauth_extension/latest/openid_oauth_extension.html">hybridized</a>) under the hood to create a streamlined signup experience that goes like this:</p>
<ol>
<li>Someone at Plaxo invites you to join by entering your Gmail address</li>
<li>You get an invitation email from Plaxo</li>
<li>You click on the link</li>
<li>Plaxo knows that you&#8217;re a GMail user (and <strong>likely still signed in</strong>), so it presents you with the following screen: <br /><img src="http://farm4.static.flickr.com/3369/3237416706_fe0cb23628.jpg" alt="" title="Google Optimized Landing Page" /><br /><small>I believe that since Plaxo already has your Gmail address, it is already somehow encoded in here to save you from having to type it in, but I haven&#8217;t tried it so I&#8217;m not sure</small></li>
<li>Clicking &#8220;Sign up with my Google Account&#8221; brings you over to Google with the following screen:<br /><img src="http://farm4.static.flickr.com/3432/3237416710_f8ee8eccb0.jpg" alt="" /></li>
<li>Clicking &#8220;Continue Sign-in&#8221; tells Plaxo that you are indeed the holder of the Gmail address, at the same time authorizing Plaxo to import your address book from Google.</li>
<li>That&#8217;s it! You&#8217;re signed up to Plaxo and your Gmail address book is available in Plaxo.</li>
</ol>
<p>The result was a staggering 92% return rate (from the Google authorization confirmation screen above), of which 92% continued with the sign up and allowed Plaxo to import their contacts from their Google address book. The results were so impressive that Plaxo&#8217;s business folks stopped the tech folks from turning off the experiment!</p>
<p>Indeed these results are impressive by today&#8217;s standard of endless signup forms and social networking fatigue. I would whole-heartedly agree that through this clever experiment, Plaxo has met their goals of making it better for the user, the identity provider, as well as the relying site.</p>
<p>The technologies that made these possible were:</p>
<ul>
<li><a href="http://openid.net/">OpenID</a> for proving who you are (to Plaxo that you do indeed own the GMail address.)</li>
<li><a href="http://oauth.net/">OAuth</a> (implemented as an extension to OpenID) was used to grant Plaxo access to your contacts stored on Google; and</li>
<li>Google Contacts API for actually importing them into Plaxo (would be nice to see <a href="http://portablecontacts.net/">Portable Contacts</a> being adopted by Google)</li>
</ul>
<p>Individually, those technologies are good at what they&#8217;re designed to do but when combined with a simple hint such as &#8220;the user is a GMail account holder, and is probably still signed in to the service&#8221;, it could be very powerful.</p>
<p>Still, my biggest takeaway from the slides are:</p>
<ul>
<li>17% (of Plaxo signups) come from GMail account holders; and</li>
<li>73% come from the top 4 (Yahoo, Microsoft, Google, and AOL)</li>
<li>all of them being OpenID Providers</li>
</ul>
<p>This shows that you can already take advantage of the fact that a large percentage of users already own an OpenID, who may be more willing to sign up to your service than they otherwise wouldn&#8217;t have if faced with another tedious registration form.</p>
<p>While many (including myself) have criticized OpenID that there are more providers than relying parties, Plaxo has proven (with impressive numbers) that with a little ingenuity and optimization of <acronym title="User Experience">UX</acronym>, sites can reap the benefits of being an RP!</p>


<p>No related posts.</p>]]></content:encoded>
			<wfw:commentRss>http://dready.org/blog/2009/02/12/why-be-an-openid-relying-party/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
