13 ms·
The main problem is you still need to support password based auth unless you want to lock out part of your user base that doesn't have an account with the suppo
by eikenberry 9y ago
The main problem is you still need to support password based auth unless you want to lock out part of your user base that doesn't have an account with the supported providers or doesn't want their login activity tracked by one of the providers.
- deathanatos 9y agoand doesn't wish to setup their own provider. I get that that is definitely not an easy thing to do, but an OpenID implementation doesn't have to force users to log in through some major social network, and I feel like your statement asserts that. (but even with that addendum, I agree, you'll probably still end up wanting to support password based login as a service provider. But as a user, I greatly appreciated not having to constantly get my password manager to meet some random list of requirements.)