[OpenID] user-initiated login
Peter Williams
pwilliams at rapattoni.com
Sat Apr 19 11:07:20 UTC 2008
Your articulating the case for unsolicited assertions, which the model specifically adopts. The tech standards just gives crappy advice and counsel on how to really achieve it, in an interoperable manner. This is probably because this case conflicts with other design goals, and it looks like folks decide to de-prioritize this feature in favor of what sp-initiated flow can bring. Such tradeoffs are fine: but you can always re-bias the game...
_________________________
Peter Williams
From: SitG Admin
Sent: Fri 4/18/2008 7:25 PM
To: general at openid.net
Subject: [OpenID] Re: user-initiated login
It did not break the authentication process to
have an OP redirecting a user to my Consumer who, as far as my
Consumer was concerned, had never been there before.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20080419/cd8dcff9/attachment-0002.htm>
More information about the general
mailing list