I am creating a user system which will be used across multiple websites without the use of SSO (the extra hassle really isn't worth it at the minute).
I am looking at ways of telling users that they can use their X Network username/password details on our specific websites.
However - one interesting point I've thought is that are these essentially a sign of a false sense of security?
For example - Say you are logging into to "Website A" and you see the "X Network" logo, so you know you can log in there.
Now for example, a Phisher sets up "Website P" and puts the "X Network" logo on it so people think it is a part of the X Network.
Are these more hassle than it's worth?
Is it just easier to let the user type their email in, and find out that way they have an account and then tell them where their account is probably from? Or even safer - logging where it was registered and telling them, or emailing them with the information on X failed login attempt(s).