Generic Authentication Flowchart, made with dia. A PDF version is included for convenience.

The "profile" steps can be replaced to whatever your application requires in order to activate an account.

This is an incomplete (see ToDo below) research and analysis based on the author's experience and even subjective personal opinions. Any problems and consequences of using this as a reference for your project, including but not limited to: analytical mishaps, security holes, invasions, etc... are not the author's responisibility. Use it at your own risk!

• Include "Lost password" functionality
• Include Unique Login Check
• Include Same IP Policy
• Include HTTP Referer check
• Include ACL or put it in a separate chart
• Many, many more...