Because most web applications store authentication details in cookies, it is useful to have an option to remove them on logout.
PythonOption external-cookie-names /apache_openid/cookie/:openidcookie
Authentication is allowed only for certain users.
PythonOption authorized-users "%(authorized_users)s"
PythonOption authorized-users-list-url file:///tmp/apache_openid/examples/openid/openids.txt
Contents of openids.txt:
%(authorized_users_lines)s
The simple OpenID authentication use-cases have no OPs configured, so you can enter any OpenID URLs on authentication.
If only one OP is configured, the authentication mechanism automatically redirects the user to that OP, so the whole process will be faster.
PythonOption allowed-op-list-url file:///var/www/apache_openid/ops/op-launchpad.txtContents of op-launchpad.txt:
Launchpad=login.launchpad.net
As the first step of the authentication process, a drop-down box is shown, where you can select through which provider you'd like to authenticate.
PythonOption allowed-op-list-url file:///var/www/apache_openid/ops/op-list.txtContents of op-list.txt:
Launchpad=login.launchpad.net MyOpenID=myopenid.com
By default a static page is displayed after logging out. However, it's possible to configure an URL where the user will be redirected after logging out.
PythonOption external-logout-url http://www.ubuntu.com/
PythonOption authorized-teams "%(authorized_teams)s"
PythonOption authorized-teams-list-url file:///var/www/apache_openid/teams/teams.txt
Contents of teams.txt:
%(authorized_teams_lines)s