Our OpenID support is still a bit experimental. It’s our first OpenID-enabled application and we’d love to work with everyone to sort out the problems, such that future implementations will be all cake from there. Use this thread to talk about OpenID issues with Highrise.

One note already: If you have an OpenID at claimID you want to use with Highrise, remember that the URL is something like http://openid.claimid.com/username—and not http://www.claimid.com/username. A good number of people had this problem already. Would be nice if claimid would delegate, but until then, be sure to use the openid subdomain.

Actually, ClaimID does delegate:

<meta http-equiv="x-xrds-location" content="http://claimid.com/factoryjoe/xrds" />
<link rel="openid.server" href="http://openid.claimid.com/server" />
<link rel="openid.delegate" href="http://openid.claimid.com/factoryjoe" />

Great to see you guys supporting OpenID!

Chris is right, our accounts delegate – so while using openid.claimid per David’s suggestion will work, the problem seems to be Highrise not handling yadis discovery information properly (i.e. if you delegate w/o xrds it works fine). Please let us know if we can do anything to help ya’ll out!

Thanks,
Fred

Oh, that’s good to know. We’re currently using JanRan’s ruby-openid and ruby-yadis libraries as the underlying infrastructure. Hopefully we can get the yadis part worked out.

Although I created a forum account, I can’t log into the Highrise Forums with my OpenID. FWIW, I delegate my Verisign OpenID through my primary web site and it works just fine with the main Highrise site.

I went through the forum’s signup process, received the activation email and followed the link to activate my account. I began typing my OpenID URL then the password field magically disappeared. I clicked “Login” and was told I entered an invalid login or password. At no point was I brought to my OpenID provider’s authorization page.

I tried again (and failed), so then I entered the username and password I had selected during signup and was able to login (obviously, since I’m posting now).

I searched the forums on beast.caboo.se for more info on Beast’s OpenID support, but didn’t find anything interesting.

Sean – Beast is using roughly the same code that Highrise is. It might be a slightly older version of the rails plugin, but it’s using the same JainRain ruby gems. If you or anyone’s interested in tracking this in Beast (the forum software used here), I’ve opened up a topic on it.

Ah, in that case I’ll look into it myself. I originally thought that perhaps the Highrise forums were running a customized Beast. Y’know, one with custom fur and gold teeth.

Great to see you guys implementing OpenID.

The OpenID I have through myopenid.com fails to authenticate back to highrisehq after clicking “Allow Forever” on myopenid.com’s website. It displays an “authentication failed” error on highrisehq while myopenid.com shows it as being authenticated correctly. Could it be because my id has a hypen between firstname and lastname?

Tried my ClaimID as well and have the same issue. It also contains a hyphen in the user name. I used the version with the OpenID domain as David suggested.

Highrise was accepting my OpenID just fine yesterday, but today it isn’t. Specifically, it correctly redirects me correctly to the myopenid.com “need to sign in” page, but from there (after I’ve logged in), it bounces me back to Highrise with an “error validating OpenID” message.

So, the delegation process from my own URL to myopenid.com seems to have worked at least once. Should I remove the meta XRDS tag and just depend on the two link tags? Or is something else at play here?

Is there any more specific info I can give you about what I tried?

Don’t give up! I know you guys’ll shake this out eventually.

—undees

Same issue as undees reports—my OpenID was working fine, but now it does not. I’ve tried using the regular username and password generated when you click the ‘problems with OpenID’ link, but that doesn’t seem to be working either.

I use myopenid.com and had the same issue as Jeff. This is a great great product and the OpenID support makes it that much better. Thanks

ditto.
openid worked yesterday, today, no go.
myopenid.com says it is making successful approvals, but highrise says authentication failed.

I’m completely locked out of Highrise.

I was using OpenID and it worked fine until this morning (GMT) when it failed even to redirect to the myopenid.com service I’m using.

Trying to login using the normal username/password doesn’t work either, nor does attempting to recover my password, etc. – not that I’ve forgotten it.

Perhaps I’ll spend the day hand-crafting curl requests via the undocumented API. :/

I have exactly the same problem as Dylan. Approval at myopenid.com – rejection at HighRise.

Same problem for me with myopenid.com

Any Highrise folks out there? We were able to have MyOpenID users login at the beginning of the launch but now it appears to be broken. Can someone please contact support@myopenid.com to hopefully get this squared away?

We haven’t changed anything in our OpenID implementation since just after launch. It would appear that myopenid perhaps made an update to their service that renders the library we’re using it with incompatible.

If the “Problems?” link is not working for you, and you can’t get into your account at all, please write support.

After further debugging, it seems that the MyOpenID problems were related to bad caches that the JanRan library were keeping. I’ve cleared those out and were able to log in with MyOpenID again. We’ll be following up with JanRan to find the root of these problems. And to get it working with xrds delegation.

@David

bq.After further debugging, it seems that the MyOpenID problems were related to bad caches that the JanRan library were keeping.

So just to clarify the issues were related to OpenID issues or are related. I am still having problems so I am wondering if this has been fixed yet in your opinion?

I am completely unable to log into the forums using OpenID.

When I try to login using http://groovymother.com/ it completely fails and reports “Invalid login or password, try again please.”. There are no hits in my access_log.

(It works fine logging into Highrise itself—this is just the forums)

The only way I can log into the forums is using the “activate” link I got sent by email last week.

I’m also locked out of Highrise. My first signup was using OpenID through myopenid.com and it worked like a charm. Today I tried to login and it didn’t work (myopenid.com shows the requests as being authenticated correctly, Highrise says “Sorry, the OpenID verification failed”). The alternate “regular” password sent via email also didn’t work. OpenID also didn’t work for the forum—I’m signed in using the activation link I got via email. Hope this is fixed soon ‘cause Highrise is really becoming one of those “how did I live without this?” tools for me.

OpenID seemed to be fixed and was working fine yesterday, but today I’m getting the Sorry, the OpenID verification failed message again.

Seems that we keep getting screwed by these association/nonce caches. I just cleared them again. Will set something up to automatically clear them and work with JanRan to make it more stable. Sorry guys. We’ll get it sorted out shortly.