1.
2.
If the user is *not already signed in, wait for
their click.
3.
Once an assertion is obtained, pass it up to the server for verification. The assertion looks like this:
...
4.
The verification servers checks the assertion and returns a response, that looks like this:
5.
Next, you should provide a logout button that calls
navigator.id.logout() and then does whatever application specific logout steps are required.
Click here to logout
6.
All Done! The site can now create an account keyed on the users identity (email address), set cookies, etc! Signing in again is just re-running these same steps.