OpenID in action...

wolfejm

I used my openid today to register for a website where I paid a fee via CC, and was a bit surprised that I wasn't asked for any kind of password. When I returned to the site to view "my account," again I provided my openid and got in with no password.

Is this normal? Considering everyone on smugmug knows everyone elses' openid, I assumed there'd be authentication when using it some where. Maybe the site I used implemented it poorly?

Thanks.

PBolchover

If you were already logged into smugmug, then perhaps the smugmug session authentication took the place of asking for your password again...

devbobo

Jeff,

The authentication process of OpenID checks that you are logged into your SmugMug account. You can double check this by logging out of your account and trying again, you will see that it requires you to login to your account before you can proceed.

Cheers,

David

wolfejm

Interesting... I didn't expect that! Yes, I had previously signed days earlier, so it wasn't top of mind, but it clearly was the case. When I bounced back to IE or logged out of smugmug, the authentication kicked in.

The interesting point for me was learning that the open id is authenticated depending on wether or not you are currently logged into your smugmug homepage.

Thanks for clarifying!