3 ms·

This makes me wonder why federated login via Facebook doesn't meet this need. It works quite well, but perhaps the OAuth confirmation scares people off (or they

This makes me wonder why federated login via Facebook doesn't meet this need. It works quite well, but perhaps the OAuth confirmation scares people off (or they are worried the requestor will access data they don't wish to share, post on their behalf, etc.) There is something really compelling about the totally-seamless experience, but do I as a user actually want that? I suppose it depends on my trust in the platform holder.

on_and_off 11y ago
I have recently implemented the revamped Google Login in an Android app. IMO this is an awesome user experience ... as long as you are ok with Google handling your credentials. Since you are using an Android phone with Play Services, you are supposed to be ok with that though .. Something like Persona might have been a better solution, but in the meantime this is by far the best login solution on Android. I have not been able to test Facebook in perfect conditions (I don't want the app on my phone) but having to go through a webview is pretty annoying, and brings a ton of security issues.
joelhaasnoot 11y ago
There are two problems with Facebook's federated login. For one: Facebook doesn't need to know everything. While some are more peculiar about privacy than others, when information is used across boundaries that exist in our physical world, users start to care. I don't want to login for work-related sites or apps with my Facebook account and I'm sure most wouldn't login to a porn site with their Facebook account either. Second problem is that the whole idea of federated login is that there are many providers who implement the same protocol, meaning whatever account I have, I can authenticate myself. Only implementing Facebook defeats the purpose of federated.
corndoge 11y ago
As someone who doesn't use Facebook, sites that offer only federated login via Facebook are worthless.

on_and_off 11y ago

I have recently implemented the revamped Google Login in an Android app. IMO this is an awesome user experience ... as long as you are ok with Google handling your credentials. Since you are using an Android phone with Play Services, you are supposed to be ok with that though .. Something like Persona might have been a better solution, but in the meantime this is by far the best login solution on Android. I have not been able to test Facebook in perfect conditions (I don't want the app on my phone) but having to go through a webview is pretty annoying, and brings a ton of security issues.

joelhaasnoot 11y ago

There are two problems with Facebook's federated login. For one: Facebook doesn't need to know everything. While some are more peculiar about privacy than others, when information is used across boundaries that exist in our physical world, users start to care. I don't want to login for work-related sites or apps with my Facebook account and I'm sure most wouldn't login to a porn site with their Facebook account either. Second problem is that the whole idea of federated login is that there are many providers who implement the same protocol, meaning whatever account I have, I can authenticate myself. Only implementing Facebook defeats the purpose of federated.

corndoge 11y ago

As someone who doesn't use Facebook, sites that offer only federated login via Facebook are worthless.