openid/src/main/java/org/springframework/security/openid/OpenIDAuthenticationProvider.java
protected Authentication createSuccessfulAuthentication(UserDetails userDetails,
			OpenIDAuthenticationToken auth) {
		return new OpenIDAuthenticationToken(userDetails,
				this.authoritiesMapper.mapAuthorities(userDetails.getAuthorities()),
				auth.getIdentityUrl(), auth.getAttributes());
	}
protected Authentication createSuccessfulAuthentication(UserDetails userDetails,
			OpenIDAuthenticationToken auth) {
		return new OpenIDAuthenticationToken(userDetails,
				this.authoritiesMapper.mapAuthorities(userDetails.getAuthorities()),
				auth.getIdentityUrl(), auth.getAttributes());
	}
Handles the creation of the final <tt>Authentication</tt> object which will be
returned by the provider.
<p>
The default implementation just creates a new OpenIDAuthenticationToken from the
original, but with the UserDetails as the principal and including the authorities
loaded by the UserDetailsService.

@param userDetails the loaded UserDetails object
@param auth the token passed to the authenticate method, containing
@return the token which will represent the authenticated user.