Integrate OpenId into your existing site
I have a working web application that already has a registration and registration system. I am looking for some advice on how to do this.
Until now, users have a username, email address, password, and some optional fields. Registration is a normal process with confirmation by email.
Now I want to allow users to use OpenId. So I added an open field to the table. There are two different login forms, and users who are already registered can add their openid information and use either the login form.
Problem with new users visiting the site for the first time and trying to login with OpenId. I create a new user for them, and I do not need a password, but still I need at least the username that is used on the site (I am not sure if this email is necessary).
So my problems are:
1) How to manage verification? Some fields are required for some users (for example, password), but not for some others. I mean, I can do it, but it immediately gets messy.
2) Do I have to ask for a username and email address when I first log into OpenId? On the one hand, I would say yes, but I'm afraid this precludes the benefits of using OpenId, i.e. not providing detailed information.
3) I could get information via SReg or AttributeExchange, but most ISPs have poor support for them. For example, my Gmail OpenId account doesn't provide an email address (!). Is there some place to find out more about the current support for these extensions?
a source to share
an article on how to integrate OpenID into an existing site is at www.paxo.com .
Some quick solutions to your problems:
1) I think you need an additional registration process. Initially, the user can choose whether he wants to use OpenID or not. If not, you have your existing registration process. If it uses OpenID, most of the information can be recovered by exchanging attributes (email, prename, lastname, ...)
2) You can receive email via OpenID Attribute Exchange. I wouldn't ask for a username or any other data that is not needed. But I would give the user the option to set / change this after they have registered.
3) It is not true that Gmail does not tell you the email. ( Official Google Docs , Exchange Attribute with lightopenid ). You must add the address as the required value. I don't know that the site has support for OpenID providers for attribute exchange. Here is a Yahoo-Article about their AX support.
a source to share