Skip to main content
This is a pre-production deployment of Warehouse. Changes made here affect the production instance of PyPI (
Help us improve Python packaging - Donate today!

OpenID authentication support for PAS

Project Description


This product implements OpenID authentication support for Zope via a Pluggable Authentication Service plugin.

Using this package everyone with an OpenID authentity will be able to login on your Zope site. OpenID accounts are not given any extra roles beyond the standard Authenticated role. This allows you to make a distinction between people that have explicitly signed up to your site and people who are unknown but have succesfully verified their identity.

Installing plone.openid

This package is made to be used as a normal python package within Zope 2. This is only supported in Zope 2.10 or later. If you are using Zope 2.8 or Zope 2.9 you can install the pythonproducts package to add python package support to your Zope.

After installing this product in your python path it needs to be registered in your Zope instance. This can be done by putting a plone.openid-configure.zcml file in the etc/pakage-includes directory with this content:

<include package="plone.openid" />

This plugin needs an active plone.session plugin to manage the login sessions for authenticated users.

If you are using buildout you can also do this by adding a zcml statement to your buildout:

zcml = plone.openid

Authentication flow

The OpenID authentication flow goes like this:

  • user submits a OpenID identity (which is a URL) to you site. This is done through a HTTP POST using a form variable called __ac_identity_url
  • the PAS plugin sees this variable during credential extraction and initiates a OpenID challenge. This results in a transaction commit and a redirect to an OpenID server.
  • the OpenID server takes care of authenticating the user and redirect the user back to the Zope site.
  • the OpenID PAS plugin extracts the information passed in via the OpenID server redirect and uses that in its authentication code to complete the OpenID authentication

Session management

The PAS plugin only takes care of authenticating users. In almost all environments it will be needed to also setup a session so users stay logged in when they visit another page. This can be done via a special session management PAS plugin, for example plone.session.

Release History

History Node


History Node


History Node


History Node


History Node


History Node


History Node


History Node


History Node


History Node


This version
History Node


History Node


History Node


History Node


History Node


Download Files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

File Name & Hash SHA256 Hash Help Version File Type Upload Date
(27.1 kB) Copy SHA256 Hash SHA256
2.4 Egg Jul 10, 2007
(15.7 kB) Copy SHA256 Hash SHA256
Source Jul 10, 2007

Supported By

WebFaction WebFaction Technical Writing Elastic Elastic Search Pingdom Pingdom Monitoring Dyn Dyn DNS Sentry Sentry Error Logging CloudAMQP CloudAMQP RabbitMQ Heroku Heroku PaaS Kabu Creative Kabu Creative UX & Design Fastly Fastly CDN DigiCert DigiCert EV Certificate Rackspace Rackspace Cloud Servers DreamHost DreamHost Log Hosting