4 ms·

SAML, single sign on, 2FA confirmation, etc. For example, I don't know what login method a user would be using (our own password? or redirect them to their cor

by dylz 6y ago

SAML, single sign on, 2FA confirmation, etc. For example, I don't know what login method a user would be using (our own password? or redirect them to their corporate's auth portal) until they enter their email.

Nextgrid 6y ago
Single sign on is indeed the reason. However, I don’t agree that this behavior is a good thing - as an industry we’ve failed; we’re inconveniencing a large chunk of users because of an implementation detail. SSO should’ve either been implemented transparently in the underlying protocols or the browser (like Kerberos actually is) or at the very least provide separate login pages so that regular users can bookmark the right one and avoid wasting time if they are not using SSO.
popotamonga 6y ago
they could just hide/show the passw field and not put it on a diferent page. make the email request on background
- NicoJuicy 6y ago
  SPA apps wouldn't like that, security wise.
  - ta17711771 6y ago
    SPA?
    - bruce511 6y ago
      Single page application. Basically a single page request (that then immediately fetches all the associated JaveScript and CSS) to run the entire app. It is popular now because its a very small step from that to having a PWA (progressive Web application) which is progressive in the sense that it can be completely cached on the users device, and work with no connection to the Internet. It also improves page-load performance in connected situations by there being no pages to load (after the first one). While a solid approach, SPAs can suffer from long initial load times, as well as a tendancy to suffer from complexity that comes with any monolithic large app.
- pests 6y ago
  Bad UX imo. User types email and then the password field disappeared! How am I gonna log in now?
jonplackett 6y ago
Interesting - yes that does happen with google and that seems like why But it also happens plenty of places where single sign in isn't an option. Like the biggest two supermarkets Tesco.com and Sainsburys.co.uk here in the UK.
- NicoJuicy 6y ago
  Guest accounts
TheJoeMan 6y ago
Then we all have to enter our email twice. Why not just ask for the info you actually want: login with password or login with sso buttons
- imnotjames 6y ago
  Because you could have thousands. Log in with Corp acme. Log in with palantir. Log in with Facebook (Corp). Log in with Facebook (end user)... Etc. You'd have to iterate through every customer with SAML / OIDC set up. Even if you are just using end user, it's sometimes confusing if there are 10+ options because you have to remember... Ok not only do I gotta remember my email I used, how did I originally sign up? .. was it with Google? With Facebook... No wait did I use email and password...

by dylz 6y ago

Nextgrid 6y ago

Single sign on is indeed the reason. However, I don’t agree that this behavior is a good thing - as an industry we’ve failed; we’re inconveniencing a large chunk of users because of an implementation detail. SSO should’ve either been implemented transparently in the underlying protocols or the browser (like Kerberos actually is) or at the very least provide separate login pages so that regular users can bookmark the right one and avoid wasting time if they are not using SSO.

popotamonga 6y ago

they could just hide/show the passw field and not put it on a diferent page. make the email request on background

NicoJuicy 6y ago
SPA apps wouldn't like that, security wise.
- ta17711771 6y ago
  SPA?
  - bruce511 6y ago
    Single page application. Basically a single page request (that then immediately fetches all the associated JaveScript and CSS) to run the entire app. It is popular now because its a very small step from that to having a PWA (progressive Web application) which is progressive in the sense that it can be completely cached on the users device, and work with no connection to the Internet. It also improves page-load performance in connected situations by there being no pages to load (after the first one). While a solid approach, SPAs can suffer from long initial load times, as well as a tendancy to suffer from complexity that comes with any monolithic large app.
pests 6y ago
Bad UX imo. User types email and then the password field disappeared! How am I gonna log in now?

jonplackett 6y ago

Interesting - yes that does happen with google and that seems like why But it also happens plenty of places where single sign in isn't an option. Like the biggest two supermarkets Tesco.com and Sainsburys.co.uk here in the UK.

NicoJuicy 6y ago
Guest accounts

TheJoeMan 6y ago

Then we all have to enter our email twice. Why not just ask for the info you actually want: login with password or login with sso buttons

imnotjames 6y ago
Because you could have thousands. Log in with Corp acme. Log in with palantir. Log in with Facebook (Corp). Log in with Facebook (end user)... Etc. You'd have to iterate through every customer with SAML / OIDC set up. Even if you are just using end user, it's sometimes confusing if there are 10+ options because you have to remember... Ok not only do I gotta remember my email I used, how did I originally sign up? .. was it with Google? With Facebook... No wait did I use email and password...