4 ms·
I wonder if this is due to brand/trust, that they only request an email, or the sign in flow is a popover as opposed to going to another app.
by danielrhodes 7y ago
I wonder if this is due to brand/trust, that they only request an email, or the sign in flow is a popover as opposed to going to another app.
- cptskippy 7y agoSocial Sign-On has a low barrier to entry, you click a button and the necessary Authentication Context is transmitted by your Identity Provider (IdP) to the Service Provider (SP). An SP can't implicitly trust an email address and must ask for a corresponding password and also verify you control the email. In this case Social wins out for a lower barrier to entry. Unfortunately the downside of Social is that the SP can request additional information about you from the IdP. And when the IdP is a SP, ask for permissions to interact on the IdP's platform on your behalf. Sometimes these requests are transparent to the user, often the user does not understand what's being asked and permits requests for access. Social Login also allows the IdP to track your interactions across sites, and enables the SP to uniquely identify you across their own properties. An SP can also do the later via Email Authentication. Sign in with Apple prevents both IdP and SP tracking across properties. It also completely cuts out the IdP. I think a lot of people are more privacy conscious today and/or have been burned by Social Sign-On. Sign in with Apple addresses those concerns and others that come with sharing your email address with an SP.