Search code examples
securityauthenticationoauthopenid

How to outsource password and account management to a third party?


I read that storing passwords yourself, handling lost passwords and accounts etc, is a complicated process, and involves a lot of work if you don't want to take security risks.

I am building a website for which security is very important. I thought it would be good to start with not trying to handle that myself, but outsource it to an external service.

What I am looking for is something a bit like "Log in with Facebook", or "Log in with Google", except that :

  • I can't use those websites nor Twitter because in themselves I will propose later on to users to link their accounts on those services, so it can be confusing if I also use them for password and account management. (For example, someone coming to the site to link to Twitter wouldn't understand if I ask them to login with Facebook)
  • I'd like to enable users to easily have an account just for my website. If using their Google account, it is used on other websites as well (at least for Gmail for example). What I would like is for users to be able to create an account just for my website.

Any idea of a service provider for this ?

Thanks in advance !


Solution

  • For example: