Not only is it annoying, but it's absurd for several reasons:
- You'd think one of the benefits of having a single login for all *.garmin.com sites would be to avoid having to log in over and over again, with the same credentials
- If you log into the forums with one username (call it A) and you subsequently log in to Connect with a second username (call it B), any open forum tabs will automatically be switched to B. This means that the forums platform is absolutely able to automatically share a login session with connect.garmin.com (for example), but for some reason the forums will only do so when you're already logged into the forums.
- If you're not logged into another *.garmin.com site, the forum doesn't force you to log in. This means that you're penalized for using other garmin sites when you come to the forums
I thought I was alone in being annoyed, but it looks like some other posters may not even realize that you don't have to log into the forums (under some circumstances) (or they're unwilling to use clunky workarounds.)
EDIT: to clarify, I don't have 2FA/MFA enabled.
This guy is literally saying the forced forum login is so annoying he'd rather not come here, just to look at a firmware changelog.
Speaking of Garmin bugs/quirks with multiple users across websites, there's an interesting bug where a user's login is inappropriately cached in the browser even after the user explicitly logs out.
Original post title: "One account can access the other's even if logged out"
Details (after investigation):
TL;DR again the specific problem here is associated with the Account Information > Change Email link in Connect, which opens the account info page on www.garmin.com and implicitly logs you in as the current Connect user [if you're not already logged into www.garmin.com].
After clicking Change Email, if you don't explicitly log out of www.garmin.com and you subsequently log into Connect as a different user and click Change Email, you'll be incorrectly logged into www.garmin.com as the first user.
So the actual bug is that the login session for www.garmin.com is inappropriately preserved, but only for the case when you click on Change Email in Connect. This happens even if it seems that you're logged out of www.garmin.com when you manually navigate to that site.
Simple repro procedure (all steps in same browser):
0. Close browser entirely, then open new browser window in incognito mode (to ensure previous session data is cleared)
1. Log into connect.garmin.com as User A and click profile pic > Account Information > Change Email. A new tab opens with www.garmin.com (account info page) as User A (correct)
2. Close the www.garmin.com tab (without logging out). Log out of connect.garmin.com
3. Open www.garmin.com and verify nobody is logged in. Do not log in
4. Log into connect.garmin.com as User B and click Change Email. A new tab opens with www.garmin.com (account info page) as User A (incorrect!)
If step 2 is modified so that user explicitly logs out of www.garmin.com, then the bug does not occur. Also note that it isn't really necessary to close the www.garmin.com tab in step 2, but a normal end user is likely to do so.
