127
edits
Authentication FAQ: Difference between revisions
Jump to navigation
Jump to search
no edit summary
No edit summary |
|||
| Line 1: | Line 1: | ||
== Whats going on here? == | == Whats going on here? == | ||
iDigBio is trying out an | iDigBio is trying out an authentication scheme we call "Social Authentication", this means that instead of requiring a username and password to log in, you can use one of the accounts you probably already have to sign in. | ||
== How does all this work? == | == How does all this work? == | ||
| Line 9: | Line 9: | ||
== Is this safe? == | == Is this safe? == | ||
Yes. iDigBio never sees your provider username and password, and all communication with the provider is done via standards compliant communication channels. The communities developing these standards have put a lot of effort into them to make sure that they are both secure, and pass only the minimum | Yes. iDigBio never sees your provider username and password, and all communication with the provider is done via standards compliant communication channels. The communities developing these standards have put a lot of effort into them to make sure that they are both secure, and pass only the minimum amount of information necessary to complete the transaction. The providers are also supposed to provide you the ability to cancel a trust relationship at any time, so you could in theory disassociate your provider account with iDigBio without even visiting our site. | ||
== I was asked to provide you access to X, what do you need that for? == | == I was asked to provide you access to X, what do you need that for? == | ||
Many of the provider interfaces we're using were designed to allow developers to create applications that interact with your provider account for you. iDigBio requests the minimum permissions possible when connecting to your account, but sometimes this can still seem like a lot of access. Rest | Many of the provider interfaces we're using were designed to allow developers to create applications that interact with your provider account for you. iDigBio requests the minimum permissions possible when connecting to your account, but sometimes this can still seem like a lot of access. Rest assured, iDigBio values its relationships with the community and the only thing we use this access for is authentication. The standards we're using for communication also require the user to be currently logged in for any account access, so if you're not currently logged in to iDigBio its impossible for us to do anything. | ||
Different providers give us different levels of default access, so if you're still uncomfortable with the level of access we'd get from a specific provider, you can use a different provider, or simply use a username and password to sign in instead. The whole idea behind Social Authentication is to allow you flexibility with the way you identify yourself to us so that you can do whatever is most comfortable for you. | Different providers give us different levels of default access, so if you're still uncomfortable with the level of access we'd get from a specific provider, you can use a different provider, or simply use a username and password to sign in instead. The whole idea behind Social Authentication is to allow you flexibility with the way you identify yourself to us so that you can do whatever is most comfortable for you. | ||