To the best of my knowledge, yes — the logic ignores whatever precedes the domain and relies solely on what the IDP returns (or else <a href="mailto:jernst@gmail.com">jernst@gmail.com</a> (your real account) could login as <a href="mailto:chris.messina@gmail.com">chris.messina@gmail.com</a> by typing that in the box and associating whatever identifier the IDP returns with what you typed in the box).<div>
<br></div><div>In other words, what you type is only used as a suggestion as to who your IDP is — it's up to your IDP to assert the identity of the current/active user.<br><div><br></div><div>Chris</div><div><br><br><div class="gmail_quote">
On Sun, Jan 23, 2011 at 1:08 PM, Johannes Ernst <span dir="ltr"><jernst+<a href="http://openid.net">openid.net</a>@<a href="http://netmesh.us">netmesh.us</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Playing around with Google's OpenIdSampleStore.com:<br>
<br>
I "sign up" with <a href="mailto:foo@gmail.com">foo@gmail.com</a>.<br>
The popup comes up asking me to confirm the login into <a href="http://openidsamplestore.com" target="_blank">openidsamplestore.com</a> for my account <a href="mailto:johannes.ernst@gmail.com">johannes.ernst@gmail.com</a> (I'm currently logged into Google).<br>
<br>
Does it simply ignore user "foo" that I entered in favor of my current Google session? Why would it do that? Simply a bug or something I don't quite understand?<br>
<br>
The <a href="mailto:openidsamplestore@googlegroups.com">openidsamplestore@googlegroups.com</a> mailing list seems dead, so I'm posting this here.<br>
<br>
Cheers,<br>
<br>
<br>
<br>
Johannes.<br>
<br>
_______________________________________________<br>
general mailing list<br>
<a href="mailto:general@lists.openid.net">general@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-general" target="_blank">http://lists.openid.net/mailman/listinfo/openid-general</a><br>
</blockquote></div><br><br clear="all"><br>-- <br>Chris Messina<br>Open Web Advocate, Google<br><br><div>Website: <a href="http://chrismessina.me" target="_blank">http://chrismessina.me</a></div><div>Blog: <a href="http://chrismessina.me/b" target="_blank">http://chrismessina.me/b</a><br>
Follow my updates: <a href="http://twitter.com/chrismessina" target="_blank">http://twitter.com/chrismessina</a> <br></div><div><br></div>This email is: [ ] shareable [X] ask first [ ] private<br>
</div></div>