A New Protocol for Single Sign-on for the Web

Abstract

A new protocol for Single Sign-on for the Web is proposed. The main goal of the introduction of this new protocol is to combine the advantages of widespread protocols OpenID and OAuth and to be free from features which we regard as disadvantages of these protocols. Another problem covered in the article: how a client web site can automatically detect a provider web site where a user already has an account to authenticate against. A special supplementary protocol is proposed for this goal.