richardl@ufp.com

<p>UFP Identity is the only dynamic security platform created for e-commerce sites, design agencies and developers that simplifies login authentication.</p>
<p>If there is a token, we support it. UFP Identity supports a wide variety of secure tokens enabling faster, more streamlined access to your websites all the while protecting user accounts from being compromised and preventing spam enrollments to your website.</p>
<h4>Our challenge</h4>
<p>UFP Identity set out to solve a huge technical challenge: To protect (I mean really, really make private!) online user’s personal info, make the process to access any number of websites at once really easy, and stop bad guys from hacking your stuff.</p>
<p>Our technology platform includes:</p>
<ul>
<li>Strongest level of password authentication and encryption!</li>
<li>Spam protection preventing unwanted user account creation</li>
<li>Account-compromise protection</li>
<li>Threat level adjustment to heighten login protection for your users</li>
<li>Seamless token integration (password, Yubico, OTP, various OATH tokens, one-time codes to phone/email/irc)</li>
<li>Quicker logins for your users. By the way we’re building a mobile app for that.</li>
<li>Universal password support for websites that use UFP Identity. This means login credentials can work on multiple websites.</li>
<li>Real-time monitoring of every login ensures your users are your users</li>
<li>Reporting tool for website administrators details every login transaction and outcome (coming soon!)</li>
<li>Multiple tokens to single account</li>
<li>Multiple accounts to single account</li>
</ul>
<h4>Certificate Signing Request</h4>
<p>The Certificate Signing Request requires a private/public key<br />
pair and the private key is encrypted with a secret key. In order to<br />
create a good secret key the plugin attempts to get good random data<br />
from /dev/urandom. If this fails, the plugin makes an attempt to<br />
securely retrieve random data from https://www.random.org</p>
<h4>Enrolling users</h4>
<p>Activating this plugin by installing the certificate will upload<br />
information about your users to our servers. We only enroll the<br />
username, email and hashed password over a private SSL connection<br />
using 2048 bit keys. We will never use any information about your<br />
users for any purpose other than authentication and verification. We<br />
will never use the email for any purpose other than resetting<br />
credentials or authentication. We will never sell or give up any of<br />
the information about your users.</p>
<h4>Telemetry</h4>
<p>We send telemetry data to our servers over an SSL connection with 2048 bit keys. This telemetry data only contains data that we<br />
would otherwise get with a successful install of the UFP Identity plugin. The telemetry can be turned off by adding an option<br />
‘identity_telemetry_enabled’ => ‘no’.</p>
<h4>Location Information</h4>
<p>We make a call to http://freegeoip.net/json/ to get location information for the Certificate Signing Request. This<br />
is to help pre-populate the required fields and minimize the amount of work you need to do. We only do this once, upon install.</p>


UFP Identity

The UFP Identity plugin integrates Wordpress login and user management seamlessly with the UFP Identity platform.

<p>This plugin adds the Retaggr functionality to your blog.</p>
<p>** IDENTITY **</p>
<p>The Retaggr Profile Card is about identity – its a virtual, interactive business card which you can customize as you wish.<br />
Widgets can be added into it to show posts from your blog,music you’re currently listening to, allow communication via IM, or pretty much<br />
Consolidate all your identity widgets on your blog into one, and add custom widgets from anywhere on the web. Built-in widgets include support for Twitter, FriendFeed, Flickr, MSN, and Disqus, to name a just a few.</p>
<p>People use Retaggr Profile Cards to bring traffic to their blog and express their identity. A demo can be found at retaggr.com.</p>
<p>Installing this plugin means :</p>
<ul>
<li>Your visitors can leave their retaggr card when they comment on your posts</li>
<li>When referring to other people in a post, you can insert their profile card, instead of just linking to their blog. </li>
<li>Your card is attached to your posts</li>
</ul>
<p>These unintrusive enhancements add context to your posts – bringing fun and useful functionality to your site, while keeping readers from unnecessarily navigating away to find out more about the person in question.</p>
<p>retaggr also allows you to add site specific widgets to card on your site – explore retaggr.com for more details.</p>
<p>** IMAGE TAGGING **</p>
<p>This plugin also gives your blog powerful image tagging functionality. Your users can tag people in any image on your blog, much like you would on a social network.<br />
Just drag around the person in the image and select the name from your address book, which is integrated with your email or Facebook.<br />
Mousing over the person then shows their retaggr Profile Card. There are full moderation and notification options.</p>
<p>You do not need to modify any of your template files — just activate the plugin, and set your options on retaggr.com.</p>
<h3>Feedback/ Help</h3>
<p>Don’t hesitate to drop us a line via the retaggr.com website if you need anything at all.</p>


retaggr

This plugin adds the Retaggr functionality to your blog.

UFP Identity vs retaggr