[OpenID] OpenID UX and IIW session

Eric Sachs esachs at google.com
Tue Nov 11 15:22:15 UTC 2008


>> I believe that right now, there would be a popup window flash. This seems
like it might be a little scary for normal users.
Good point George.  I'll try to remind the group to include that question in
the discussions.

On Tue, Nov 11, 2008 at 5:46 AM, George Fletcher <gffletch at aol.com> wrote:

> Hi,
>
> I'm sure there will be an IIW session on OpenID and UX so I wanted to
> ask that the following case be included in the discussion.
>
> If a popup window is used for the authenitcation flow (e.g. Facebook
> connect), then what do we do in the case that the user is already
> authenticated to their OpenID Provider and has previously given
> permanent consent to the site to receive their authentication (and
> possible SREG) data?
>
> I believe that right now, there would be a popup window flash. This
> seems like it might be a little scary for normal users.
>
> This could be mitigated by doing an "check_immediate" first but in that
> case, the user would have had to at least given their OpenID so that
> site could do discovery.
>
> I suppose we could try and rely on cookies, and cookie the user with
> their last chosen OpenID Provider, but this makes it difficult with
> users with multiple accounts from different OPs (and gets a little weird
> in the directed identity case). Also, I only allow cookies per session
> so that would break the experience for me as well.
>
> Thoughts?
>
> Thanks,
> George
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20081111/52ebadc3/attachment-0002.htm>


More information about the general mailing list