<acronymtitle="LemonLDAP::NG">LL::NG</acronym> can delegate authentication to an OpenID server. This requires <ahref="http://search.cpan.org/~mart/Net-OpenID-Consumer/"class="urlextern"title="http://search.cpan.org/~mart/Net-OpenID-Consumer/"rel="nofollow">Perl OpenID consumer module</a> with at least version 1.0.
<p><divclass="notetip"><acronymtitle="LemonLDAP::NG">LL::NG</acronym> can also act as <ahref="../../documentation/1.4/idpopenid.html"class="wikilink1"title="documentation:1.4:idpopenid">OpenID server</a>, that allows to interconnect two <acronymtitle="LemonLDAP::NG">LL::NG</acronym> systems.
<p><divclass="notetip">OpenID authentication can proposed as an alternate authentication scheme using the <ahref="../../documentation/1.4/authchoice.html"class="wikilink1"title="documentation:1.4:authchoice">authentication choice</a> method.
<liclass="level2"><divclass="li"><strong>List type</strong>: choose white list to define allowed domains or black list to define forbidden domains</div>
</li>
<liclass="level2"><divclass="li"><strong>List</strong>: domains list (comma separated values)</div>
</li>
</ul>
</li>
</ul>
<p>
To configure requested attributes, go in <code>Variables</code>><code>Exported variables</code> and define attributes:
</p>
<ul>
<liclass="level1"><divclass="li"><strong>Key</strong>: internal session key, can be prefixed by <code>!</code> to make the attribute required</div>