<blockquote style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;" class="gmail_quote"><font size="2">
As to a local password, I would instead just use email as an account retrieval mechanism if needed.</font></blockquote><div><br><br>Assuming they have lost control of their previous openid; after they receive the account retrieval email wouldn't it make sense for them to setup a username/password to retrieve their account or would you think they should have a second openid ready to associate their account to?
<br><br>I personally think using a local fallback in the form of an optional username/password makes sense. But it's really up to the RP and its needs. Having a "captiveOpenID" doesn't make sense as a solution to this scenario since they would have to authorize that with a username/password anyway (I may be missing the meaning of captiveOpenID).
<br><br>Immad<br></div><br><br><div><span class="gmail_quote">On 11/07/07, <b class="gmail_sendername">Recordon, David</b> <<a href="mailto:drecordon@verisign.com">drecordon@verisign.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div>
<p><font size="2">Hey John,<br>
I think some sort of local display name is certainly desired in many cases. It should however be easy to then find their OpenID identifier from their profile page for example.<br>
<br>
As to a local password, I would instead just use email as an account retrieval mechanism if needed.<br><span class="sg">
<br>
--David</span></font></p><div><span class="e" id="q_113b68e7500a8162_2"><font size="2"><br>
<br>
<br>
-----Original Message-----<br>
From: John Wang [<a href="mailto:jwanggroups@gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">mailto:jwanggroups@gmail.com</a>]<br>
Sent: Tuesday, July 10, 2007 09:21 PM Pacific Standard Time<br>
To: OpenID - General<br>
Subject: [OpenID] OpenID Registration Scenario<br>
<br>
For a site that does not have sensitive information but does have an online<br>
identity aspect where there will be a lot of information associated with<br>
user's online identity on the site over time, does it make sense to have<br>
OpenID users also create a local username/password?<br>
<br>
I think it makes some sense to have a username since a user can have<br>
multiple OpenIDs associated with one online identity. Additionally a<br>
username will be more user-friendly to see on various pages. The username is<br>
associated with a unique online identity for the site while the OpenID is<br>
just an authentication method.<br>
<br>
As for a local password, it seems to make for a better user experience to<br>
have a fallback incase the user's OpenID OP auth server becomes unavailable<br>
for whatever reason. This way the user can use OpenID when they want but if<br>
it ever becomes unavailable, they still have access to their online<br>
identity. From a community site perspective, it seems to make sense to give<br>
the user a fallback auth mechanism controller by the site instead of forcing<br>
the user to rectify the situation with their OP in case there's an issue<br>
there.<br>
<br>
>From the above, I'm thinking that it would make sense to have the user<br>
register an account by creating a username/password or<br>
username/captiveOpenID controlled by the site and then let the user<br>
attach/associate OpenIDs to those accounts. The other question here is<br>
whether one OpenID can only be attached to a single site account or whether<br>
the user should be allowed to use the same OpenID for multiple site<br>
accounts. The latter seems more flexible and user-friendly.<br>
<br>
What do you think of the above and what are sites doing today with respect<br>
to OpenID and local auth methods?<br>
<br>
John<br>
<br>
--<br>
John Wang<br>
<a href="http://www.dev411.com/blog/" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://www.dev411.com/blog/</a><br>
</font></span></div>
<p></p>
</div>
<br>_______________________________________________<br>general mailing list<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:general@openid.net">general@openid.net</a><br><a onclick="return top.js.OpenExtLink(window,event,this)" href="http://openid.net/mailman/listinfo/general" target="_blank">
http://openid.net/mailman/listinfo/general</a><br><br></blockquote></div>