Intermittent OpenID issues for some users

[Ryan Boyd]

We are in the process of changing our OpenID keys.  Unfortunately, the proper keys weren't rolled out quickly enough to all data centers due to a process issue.  This means that if you start the OpenID flow in one data center, but end up completing it through another data center, your OpenID requests will fail.

We're in the process of sending traffic away from all the data centers with old keys, which will resolve this issue.  Will update.

Thanks,

-Ryan

[Ryan Boyd]

Okay, traffic is now pointed entirely at data centers with the new keys.  Please let us know if you're still experiencing issues by updating this issue in the issue tracker: http://code.google.com/a/google.com/p/apps-api-issues/issues/detail?id=2844

Note: some non-compliant OpenID implementations may not handle key updates correctly (they should fail back to stateless mode as per the spec).  In this case, clearing your association store should resolve any issues.

Thanks,

-Ryan

[Ryan Boyd]

Note: we're also updating our processes to ensure new key rollouts happen without incident.  Our apologies for the inconvenience.