[OpenID] OpenID Consumers "Best Practices"?

[Ekkehard Gümbel]

Hi all,
after having published a beta version [1] of a generic OpenID extension 
for the TYPO3 content management system (with 200.000+ installations not 
exactly a small one) , and presenting it at the 2007 TYPO3 conference [2] 
[3], we are now in the process of making it more complete and also more 
easy and convenient to use. 
As a starting point, I tried to figure out what I like best at other 
sites, but - frankly - few seem to go very far at this point.

I wonder if there is any guideline for setting up a nice OpenID consumer?
Possible topics could include
-> coexistence with traditional login boxes (e.g. put them on separate 
screens or not, ...)
-> other end user experience, recommended explainations, ...
-> recommended account management capabilities for end users (edit their 
associated OpenIDs, ...)
-> validation of data coming from the OpenID provider
-> follow-up security and validation means you may want (double opt-in, 
captcha, ...)
-> ...

I guess that most people will face the same questions I did (or do, or 
will do), but from a quick <some search engine> lookup I couldn't find 
much helpful. Is there anything you can point me to (documents, wiki 
pages, blogs, threads, ...)?

Thanks!
/Ekki

[1] 
http://typo3.org/documentation/document-library/extension-manuals/naw_openid/current/
[2] http://t3con07.typo3.org/
[3] http://www.naw.info/t3con07

Ekkehard Gümbel

http://www.naw.info
----------------------------------------------------------
Tel. +49 (0)511 6262 9311 // Fax +49 (0)511 6262 933311
naw.info net&works Internet Services GmbH
Luetzerodestr. 12 // 30161 Hannover // Germany
----------------------------------------------------------
PGP Fingerprint 711A A740 3551 067F EA4E  964B 95BE 963F 0E34 A8A7

TYPO3 Association / TYPO3partner Netzwerk / Adobe Solution Network Premium 
Partner