##language:en
# <<Include(LanguageNavigationHome)>>
[[CAcertOpenIDConnect/CA|català]] | [[CAcertOpenIDConnect/CZ|česky]] | [[CAcertOpenIDConnect/DA|dansk]] | [[CAcertOpenIDConnect/DE|deutsch]] | '''english''' | [[CAcertOpenIDConnect/ES|español]] | [[CAcertOpenIDConnect/FA|زبان فارسی]] | [[CAcertOpenIDConnect/FR|français]] | [[CAcertOpenIDConnect/IT|italiano]] | [[CAcertOpenIDConnect/NL|nederlands]] | [[CAcertOpenIDConnect/PL|polski]] | [[CAcertOpenIDConnect/PT|português]] 
----
= CAcert's OpenID Connect =
{{attachment:cacert-open-id-connect.jpeg|Not to be a volunteer, just giving a hand|width=300,align="right"}}
OpenID Connect is a distributed identity framework on top of OAuth that not only allows safe authentication but also make it possible for the sites to move the distributed data in the internet and provide better services.

<<TableOfContents>>

== CAcert's OpenID Connect Tool ==
Do you operate another system on which ''CAcert's OpenID Connect'' also works? We would be happy to publish your instructions and, if applicable, the corresponding plugin here on this page. Simply contact the secreatary @c.o.
 * (./) [[attachment:CAcert-OpenID-Connect-Registration-Tool.pdf|Illustrated Guide CAcert OpenID Connect general information (pdf)]] (will be completed soon)

Parts of this guide can be downloaded as fact sheets as well:
 * (./) [[attachment:CAcert-OpenID-Connect-Registration-01-SSO.pdf|Factsheet CAcert and Single Sign On (SSO) (pdf)]]
 * (./) [[attachment:CAcert-OpenID-Connect-Registration-02-OIDC-Reg.pdf|Factsheet CAcert OpenID Connect Registration (pdf)]]
 * (./) [[attachment:CAcert-OpenID-Connect-Registration-03-Client-Certs.pdf|Factsheet CAcert Client Certificates (pdf)]]

=== With CAcert certificates ===
 * (!) Dovecot (e-mail server)
 * (./) Drupal (CMS) [[attachment:CAcert-OpenID-Connect-Registration-Examples-Drupal.pdf|Illustrated Guide CAcert OpenID Connect for Drupal (pdf)]] | [[https://www.drupal.org/docs/extending-drupal/contributed-modules/contributed-module-documentation/oauth-openid-connect-login-oauth2-client-sso-login/openid-connect-login-oidc-login-setup-guide|Help]]
 * (./) Gitea
 * (./) Mantis Bug Tracker
 * {2} Moinmoin (wiki)
 * (./) Nextcloud [[attachment:CAcert-OpenID-Connect-Registration-Examples-Nextcloud.pdf|Illustrated Guide CAcert OpenID Connect for Nextcloud (Draft) (pdf)]]
 * (!) Roundcube (web e-mail)
 * (./) WordPress (CMS) [[attachment:CAcert-OpenID-Connect-Registration-WORDPRESS.pdf|Illustrated Guide CAcert OpenID Connect for Wordpress (pdf)]] | [[https://wordpress.com/plugins/browse/openid|Plug-ins]]

 * {1} Pearl script
 * {1} PHP script

(./) ready <<BR>>
(!) now testing <<BR>>
{1} {2} {3} will come later

=== With your own certificates ===
Do you operate another system on which ''CAcert's OpenID Connect'' also works? We would be happy to publish your instructions and, if applicable, the corresponding plugin here on this page. Simply contact the secreatary @c.o.
 * Documentation
 * Download
 * Code

== Services using CAcert's OpenID Connect ==
{{attachment:cacert-open-id-connect-rund.jpeg|Not to be a volunteer, just giving a hand|width=300,align="right"}}

=== Services by CAcert ===
 * https://bugs.cacert.org/login_page.php Bug Tracker
 * https://code.cacert.org/user/login Gitea

=== Services by third parties ===
 * ...

== Background ==
=== Theoretical Background ===
 * Barthold J. Derlagen, Onno M. Berfelo: '''How to use the CAcert infrastructure within an OpenID context?'''. Radboud University, Faculty of Science, Institute for Computing and Information Sciences, 2010.(=Master Thesis) https://www.cs.ru.nl/masters-theses/2010/B_Derlagen___How_to_use_the_CAcert_infrastructure_within_an_OpenID_context.pdf

=== Technical Background ===
 * ...

== Costs ==
The tool is available under a free licence. It can be used free of charge.

If you use it in a commercial environment, please consider a (regular, e.g. monthly or annual) donation at your discretion to cover the cash expenses of the volunteer developers and the operation of the servers.

 Donations<<BR>>
 IBAN CH02 0077 4010 3947 4420 0 (CHF, EUR, USD and other currencies)<<BR>>
 CAcert Inc, 7514 Sils i.E., Switzerland<<BR>>
 Graubündner Kantonalbank, Chur<<BR>>
 BIC (SWIFT) GRKBCH2270A 

----
[[CategoryOpenID]]