4 ms·
Choose your authentication method before entering the login details then. What are they going to do if they need to add support for electronic id cards? Add a 3
by Mirioron 7y ago
Choose your authentication method before entering the login details then. What are they going to do if they need to add support for electronic id cards? Add a 3rd page into the login step?
- hirsin 7y agoIn Auth we call this a NASCAR, where there are so many buttons on the page that the user no longer knows which one they used to login last time. This leads to retention problems as users accidentally sign up for your app multiple times, ending up with their data scattered in multiple spots.
- hn_throwaway_99 7y agoSo instead of letting the system, which can easily determine which auth system to use based on the email, you're putting the responsibility on the user to remember what they used when they have potentially tens/hundreds of web accounts? Yet somehow putting the password on the next page is worse??
- Mirioron 7y agoIf they're going to use a password manager then the password manager will tell them. Your system can't determine if the user signed up with Google or is using an electronic id card either.
- hirsin 7y agoYes, it can. How do you think Auth works? You know what auth methods the user has. Otherwise you can't really validate their auth.
- Mirioron 7y agoIf you're using an electronic id card then you don't have the same username and password values that your website uses. You likely won't even use the same fields. Authenticating through that usually just involves a separate button.
- hirsin 7y agoAuth systems don't key off of usernames... When we added FIDO support there's still a backing user store that records user x has FIDO y, with a recording of the public key. That's how the pairing works. You can see it today on login.live.com