3 ms·

Yes, they could. I can't remember where I've seen that - maybe okta or oneLogin?

• basch 7y ago
  Option 2 in the article
  • isostatic 7y ago
    Not quite. That still has the field open, which could still be filled in. The ajax call could blank the field (even if it's been filled in already), preventing the password from leaving the browser even accidentally.
    • basch 7y ago
      "dont send password to server if sso radio box is checked"