This is what OpenID promised but failed to deliver, and turned into "now what big box brand Connect thingy did I sign in with again"?

The biggest challenge is the complete lack of recoverability when inevitably a customer loses his keys and a website owner is made to look like a chump because there's nothing much he can do to help.