Authentication on the web wasn't simple even when it was mostly usernames and passwords. Now, with 3rd-party authentication services like OAuth, OpenID, and Facebook Connect, creating good user experiences has gotten a little weirder and a little harder. I'll give some examples, and present a pragmatic approach to designing identity and authentication on the web.

James Reffell is a designer. He lives near the beach in San Francisco. Currently he's a Director of User Experience at Webroot, where he helps make security less scary for normal people. He's also designed things at wee startups and big web companies like Yahoo and eBay.
"SXSW" and "South By Southwest" are registered trademarks of SXSW Inc.
Any
unauthorized use of these names, or variations of these names, is a
violation of state, federal and international trademark laws.
All SXSW art and text on this website are copyrighted. ©2010 SXSW, Inc.