I really liked Persona and put a bunch of work into extending it (adding support for things like selective attribute disclosure). One real design limitation was that it didn't support delegation (the original use case for OAuth).