Mozilla Persona: Simplified Sign-on at OpenWebCamp V

1. @ Open Web Camp V
Vlad Filippov

2. @vladikoff

3. Identity Team at Mozilla
https://hacks.mozilla.org
http://identity.mozilla.com
Persona, Profile in the Cloud, Firefox Sign-in, Identity UX

4. • Mozilla Persona - a login system for the Web
• Eliminates site-specific passwords
• Use your email to sign in into websites
• All open source
• User privacy is one of the core goals
Mozilla Persona Overview

5. Users
• A better way to sign in
Developers
• Why Persona?
• Persona API
• Libraries & Plugins
Identity Providers
• BrowserID Protocol
• Running your own IdP
Mozilla Persona for ...

6. Persona for Users

7. Current state of sign-in

8. Current state of sign-in

9. Current state of sign-in

10. Mozilla Persona - A better way to sign in!

11. Mozilla Persona - A better way to sign in!

12. Persona - Manage addresses
login.persona.org

13. Identity Bridging
@yahoo.com accounts can
login to Persona-enabled sites

14. Persona - Browser Support
Tested with

15. Persona - Native on Firefox OS!

16. Firefox OS Demo

17. Persona for Developers

18. Building Sign In
bad passwords challenging UX
password reset recovery
support security backup

19. Easy to use. Easy to implement in your apps or sites
Federated Protocol & Decentralized
No social profiles attached
No need to store passwords
No need to rely on third-parties
Eliminate registration forms and more...
Why Persona?

20. UX freedom
Persona for developers

21. UX Prototypes
Persona for developers

22. Persona for developers
Translated & Localized

23. Persona at Mozilla

24. Persona around the Web

25. Persona around the Web

26. Persona around the Web

27. Persona around the Web

28. Persona around the Web

29. Persona around the Web

30. Persona in your app
1. JavaScript Library
2. Login / logout buttons
3. Configure Persona
4. Verify Assertions

31. Persona API - 1. JavaScript Library
https://login.persona.org/include.js

32. Persona API - 2. Buttons!
<a href="javascript:navigator.id.request()">Sign in</a>
<a href="javascript:navigator.id.logout()">Log out</a>

33. Persona API - 3. Configure
client.js

34. Persona API - 4. Verify
app.js (server-side)

35. Persona API - 4. Verify
routes.js (server-side)

36. Persona API in your favorite language
verifier response

37. Persona API in your favorite language

38. Persona with plugins
1. JavaScript Library
2. Login / logout buttons
3. Configure Persona
4. Verify Assertions

39. Meteor + Persona Demo

40. Persona for developers

41. Existing plugins and libraries
JavaScript
Python
Ruby
PHP
Java
Clojure
...

42. Persona for Identity Providers

43. Persona - for your domain
user@yourdomain.com
yourdomain.com
Identity Provider

44. Persona - IdP in your language
Reference implementation in Node.js

45. Persona - BrowserID Actors
Users - A person that wants to sign into a website
Relying Parties - Sites that use Persona for sign-in
Identity Providers - Domains that can issue certificates

46. Persona - Step 1: Certificate Provisioning
/.well-known/browserid
Identity Provider
Provisioning URL
using email and public key
User Certificate
Browser

47. Persona - Step 2: Identity Assertion
Identity Assertion
domain of the RP + expiration
Browser

48. Persona - Step 3: Verification
Identity Assertion
User Certificate
Identity Provider
/.well-known/browserid

49. Persona - Fallback IdP
Fallback Identity Provider
/.well-known/browserid
Identity Provider
Browser or Relying Party requests

50. browserid-certifier
generate a shared public key for the IdP
serve /.well-known/browserid
has the public key, authentication & provisioning urls
Persona - Setting up an IdP
implement provisioning page & authentication page

51. Developer Documentation
https://developer.mozilla.org/persona
Need to introduce Persona to others?
http://mozilla.org/persona
User? Developer? Submit your user story:
https://github.com/mozilla/browserid-roadmap
Need help beyond the docs?
#identity on irc.mozilla.org
Persona for everyone

52. developer.mozilla.org/persona
Thanks!