4 ms·
Honestly asking, what's wrong with "Password (Leave empty if you're using {Name of SSO}): ____"? If you are going to tell that may confuse users, I think not h
by egeozcan 6y ago
Honestly asking, what's wrong with "Password (Leave empty if you're using {Name of SSO}): ____"?
If you are going to tell that may confuse users, I think not having a password field is already confusing the other half, while also not being password-manager-friendly.
- fckthisguy 6y agoI don't think making the user read instructions is the solution. Most (myself included) will begin typing before they finish reading. The current trend to only show the password box after the username is provided doesn't have to be bad for password managers. I use loads of sites that do this (so they can support SSO) and they just use hidden form fields so the password managers know what to do. I'd be curious to hear any suggestions you have for password managers to improve here though. I can't think of anything short of a .well-defined login route.
- beforeolives 6y agoThe Oreilly learning platform does this. Email and password field on the same page and a message under the email field > Using Single Sign-on (SSO)? Simply enter your company email address and click sign in. Seems simple enough to me as a user, not sure how most people interact with it though or how many companies A/B test these things.
- benhurmarcel 6y agoMy company uses an SSO provider with Google Workspace. Most employees have no idea about any of that, they wouldn't know and probably would type their company password there.
- beforeolives 6y agoThe password field disappears if you enter an SSO-compatible email address.
- johannes1234321 6y agoThen you have to either leak a list of each customer to the client to verify there or send each key stroke and consider latency ...
- emilsedgh 6y agoThat requires you to teach your users what SSO is. I don't think it's a great UX.
- criddell 6y agoSeems like password managers should be able to handle the password being entered on the next page when there's no input on the current page.
- nerdponx 6y agoKeepassXC (and its browser extension KeepassXC-Browser) does this. Not sure why anyone would even consider a different password manager. (Just don't forget to donate, if you have the means.)
- jasdine817 6y agoBecause different people have different requirements.
- kevincox 6y agoFirefox also handles every one of these perfectly. I assume there is a hidden password field already but whatever it is it doesn't cause me issues other than an extra click.