1 files changed, 59 insertions, 0 deletions
diff --git a/files/fr/archive/mozilla/persona/identity_provider_overview/index.html b/files/fr/archive/mozilla/persona/identity_provider_overview/index.html
new file mode 100644
index 0000000000..6a29be7c8f
--- /dev/null
+++ b/files/fr/archive/mozilla/persona/identity_provider_overview/index.html
@@ -0,0 +1,59 @@
+---
+title: Identity Provider Overview
+slug: Archive/Mozilla/Persona/Identity_Provider_Overview
+translation_of: Archive/Mozilla/Persona/Identity_Provider_Overview
+---
+<p>Un Fournisseur d'Identité (Identity Provider ou IdP) Persona  est un domaine qui enregistre et certifie directement l'identité de ses utilisateurs. Parce que les identités de Persona sont basées sur les adresses email, tous domaine offrant des emails à leurs utilisateurs peut simplement devenir un IdP.</p>
+
+<p>Si vous avez un nom de domaine, vous pouvez devenir un IdP Persona en implémentant un support pour le protocole BrowserID.</p>
+
+<p><em>If you have a domain name, you can become a Persona IdP by implementing support for the underlying BrowserID protocol.</em></p>
+
+<h2 id="Le_document_support_IdP">Le document support IdP</h2>
+
+<p>Domains advertise their ability to act as IdPs by publishing a support document at <code>/.well-known/browserid</code>. This JSON-formatted document contains three values:</p>
+
+<ul>
+ <li><code>public-key</code>: The public part of the domain's cryptographic key.</li>
+ <li><code>authentication</code>: The domain's page for asking users to log in.</li>
+ <li><code>provisioning</code>: The domain's page for certifying its users' identities.</li>
+</ul>
+
+<p>Websites use the <code>public-key</code> to verify the authenticity of users' identity assertions.</p>
+
+<p>Browsers use the <code>authentication</code> and <code>provisioning</code> values to obtain certification of their user's identity.</p>
+
+<p>For more information, including how domains can delegate to other IdPs, see the <a href="https://developer.mozilla.org/en-US/docs/Persona/.well-known-browserid" title="https://developer.mozilla.org/en-US/docs/BrowserID/.well-known-browserid"><code>/.well-known/browserid</code> documentation</a>.</p>
+
+<h2 id="Comment_le_navigateur_interagit-t-il_avec_les_IdPs">Comment le navigateur interagit-t-il avec les IdPs ?</h2>
+
+<p>Pour montrer l'interaction entre les Navigateurs et les IdPs, nous allons regarder ce qui doit se passer la première fois que <code>alice@example.com</code> essaie de se connecter à un site en utilisant Persona.</p>
+
+<ol>
+ <li>Le navigateur d'alice récupère le document support à l'url <code>https://example.com/.well-known/browserid</code>.</li>
+ <li>Alice's browser invisibly loads the <code>provisioning</code> page for <code>example.com</code> and asks it to sign a public key certifying Alice's identity.</li>
+ <li>Before signing the key, <code>example.com</code> needs proof that the user really is Alice, so it tells the browser that she needs to authenticate.</li>
+ <li>Alice's browser shows Alice the <code>authentication</code> page for <code>example.com</code> and she signs in, establishing a new session at <code>example.com</code>.</li>
+ <li>Alice's browser reloads the <code>provisioning</code> page and again asks it to sign a public key certifying Alice's identity.</li>
+ <li>The <code>provisioning</code> page can verify Alice's identity by inspecting the new session. Satisfied, it signs a certificate containing Alice's public key, her email address, and an expiration date for the certificate.</li>
+</ol>
+
+<p>For the duration of the signed certificate, Alice's browser can create valid identity assertions for <code>alice@example.com</code> whenever she wants to log into a web site with Persona.</p>
+
+<p>Steps 3-5 can be skipped if Alice already has a valid session with <code>example.com</code>, for example, from logging into her webmail or an intranet portal.</p>
+
+<h2 id="Comment_les_Sites_Web_interagissent_avec_les_IdPs">Comment les Sites Web interagissent avec les IdPs ?</h2>
+
+<p>Let's say Alice wants to sign in to <a href="http://123done.org" title="http://123done.org">123done.org</a>. Her browser would generate and sign an identity assertion containing the certificate from above and present it as proof of her identity.</p>
+
+<p>By comparing Alice's signature on the identity assertion with the public key inside the signed certificate, 123done can be confident that the certificate was issued to the same person that generated the identity assertion. However, 123done still needs to check that the certificate itself is valid by examining its signature.</p>
+
+<p>Because the certificate was issued for <code>alice@example.com</code>, 123done fetches the support document from <code>https://example.com/.well-known/browserid</code>. It then extracts the <code>public-key</code> and compares that to the signature on Alice's certificate. If the key matches the signature, 123done knows that the certificate is legitimate and can finish logging Alice in.</p>
+
+<p>Note that 123done never "phoned home" or otherwise revealed Alice's identity when she logged in. Rather, it only needed to request a single, cacheable document from <code>example.com</code>.</p>
+
+<h2 id="Security_and_trust">Security and trust</h2>
+
+<p>The BrowserID protocol, and thus Persona, are built on standard public key crytography techniques.</p>
+
+<p>Feel free to explore our documentation on the <a href="/en/Persona/Crypto" title="https://developer.mozilla.org/en/Persona/Crypto">cryptographic concepts</a> behind how a Persona IdP works or read <a href="/en-US/docs/Persona/Implementing_a_Persona_IdP" title="/en-US/docs/Persona/Implementing_a_Persona_IdP">more detail on how IdPs are implemented</a>.</p>