[OpenID] Openidsamplestore

Chris Messina chris.messina at gmail.com
Mon Jan 24 00:57:12 UTC 2011


Yes, as you've discovered, multi-login actually brings more headaches than
solutions when not completely baked into all of Google's products —
especially multi-login during third-party authentication.

Google is definitely ahead of the curve in this particular area — where many
Google users have multiple Google accounts and want to be logged into
several of them at the same time... works great until you go and try to use
OpenID — but we'll get there!

Chris

On Sun, Jan 23, 2011 at 3:55 PM, Johannes Ernst <jernst+openid.net@
netmesh.us> wrote:

> ... now I'm logged into two Google accounts at the same time, using the
> otherwise very cool Google multiple account feature.
>
> Going back to openidsamplestore.com, I am trying to log in using the
> "other" (non-primary) account. But I seem not to be able to do that: the
> user component of the e-mail address is discarded, as we just figured out,
> and I can't choose the non-primary account in the OpenID confirmation
> dialog.
>
> Work left to be done? ;-)
>
>
> On Jan 23, 2011, at 14:07, Chris Messina wrote:
>
> To the best of my knowledge, yes — the logic ignores whatever precedes the
> domain and relies solely on what the IDP returns (or else jernst at gmail.com(your real account) could login as
> chris.messina at gmail.com by typing that in the box and associating whatever
> identifier the IDP returns with what you typed in the box).
>
> In other words, what you type is only used as a suggestion as to who your
> IDP is — it's up to your IDP to assert the identity of the current/active
> user.
>
> Chris
>
>
> On Sun, Jan 23, 2011 at 1:08 PM, Johannes Ernst <jernst+openid.net@
> netmesh.us> wrote:
>
>> Playing around with Google's OpenIdSampleStore.com:
>>
>> I "sign up" with foo at gmail.com.
>> The popup comes up asking me to confirm the login into
>> openidsamplestore.com for my account johannes.ernst at gmail.com (I'm
>> currently logged into Google).
>>
>> Does it simply ignore user "foo" that I entered in favor of my current
>> Google session? Why would it do that? Simply a bug or something I don't
>> quite understand?
>>
>> The openidsamplestore at googlegroups.com mailing list seems dead, so I'm
>> posting this here.
>>
>> Cheers,
>>
>>
>>
>> Johannes.
>>
>> _______________________________________________
>> general mailing list
>> general at lists.openid.net
>> http://lists.openid.net/mailman/listinfo/openid-general
>>
>
>
>
> --
> Chris Messina
> Open Web Advocate, Google
>
> Website: http://chrismessina.me
> Blog: http://chrismessina.me/b
> Follow my updates: http://twitter.com/chrismessina
>
> This email is:   [ ] shareable    [X] ask first   [ ] private
>
>
>


-- 
Chris Messina
Open Web Advocate, Google

Website: http://chrismessina.me
Blog: http://chrismessina.me/b
Follow my updates: http://twitter.com/chrismessina

This email is:   [ ] shareable    [X] ask first   [ ] private
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20110123/1a68f900/attachment.html>


More information about the general mailing list