32

There are obvious advantages to limiting sign-ups to a service like Facebook connect - getting a name, age, avatar, etc. without the annoyance to your customers of asking them to fill it all in.

We are currently considering this, but there are some good arguments for using other services as well - such as Twitter, LinkedIn, Google, etc. I can even think of some very good reasons (privacy being chief amongst them) to still keep our own sign-in.

The issue then is that giving people too many options is not a good UX.

Our target audience is subject specific (architecture, language learning, etc.) so we can't predict our customer audience very well yet.

What would you use for sign-ups and why?

Edit: I need to add that our application is targeted at mobile use, so screen real estate is also a consideration in showing many options.

14
  • 16
    Spotify recently made that change. You can have a look at the users opinions here: getsatisfaction.com/spotify/topics/…
    – Wousser
    Sep 27, 2011 at 9:59
  • 7
    @Rahul: Wouldn't that be because the people who would mind just never signed up in the first place?
    – JohnGB
    Sep 27, 2011 at 10:37
  • 23
    I don't have a facebook account, never had it, and have no intention to ever get one. And I believe I'm not the only one. You would lock out a lot of users if you would only use facebook.
    – Ikke
    Sep 27, 2011 at 13:15
  • 13
    Lots of people don't trust facebook, and they trust your site with facebook's info even less. Provide options, even if FB is the primary option for convince. And I don't see how FB/not FB or ever FB/Twitter/Not FB is too many options.
    – Ben Brocka
    Sep 27, 2011 at 13:17
  • 6
    I'm with Ikke. I don't have a Facebook account and will never get one. I'd say offer at least a generic OpenID option if you're that afraid of "too many choices".
    – Shauna
    Sep 27, 2011 at 13:51

14 Answers 14

57

Facebook only? Don't do it! I would always give people the option for maximum chance of sign up. Sign up forms that allow for your own sign in and using another account don't have to be complex, although many do seem to be for some reason. Digg is a good example of one that keeps it pretty simple.

You already said you don't know your customer audience that well - so why throttle it with such apparent inflexibility from first sight.

enter image description here

5
  • 2
    But is "maximum chance of signup" defined as a breadth of services offered or as the lowest possible barrier to entry? Arguably Facebook's signup form (as shown on the Spotify signup page now) requires much less work on the user's end compared to the Digg form, which requires you to either input data or choose an alternative.
    – Rahul
    Sep 27, 2011 at 10:25
  • 1
    @Rahul Good question, and it's probably a compromise between the two. But in this case, it's not just the number of items that is the barrier to entry, but the associated baggage that comes with making it all about a signup for facebook rather than a signup for your own app. On desktop, using one browser, it's easy to sign up via facebook if you're already logged in. On mobile you've probably got a separate facebook app (?). If using facebook signin with your own app, chances are you'll need to actually remember your password as the info won't be automagically shared. Sep 27, 2011 at 10:47
  • 4
    @Rahul it's about conversion rate of course, and if you ignore everyone that doesn't have a facebook or doesn't want to share it with you you're probably ditching a lot more than all people unwilling to make a 100ms decision.
    – Ben Brocka
    Sep 27, 2011 at 13:18
  • 9
    facebook only is anti Open Web. and evil.
    – albert
    Sep 27, 2011 at 19:35
  • 3
    +1 for "You already said you don't know your customer audience that well - so why throttle it with such apparent inflexibility from first sight." There is a real case to be made for using exclusive Facebook login if you know your users are the kind of free-wheeling people that hurtle themselves around the internet using Facebook logins as their passport - then the blue "F" is a beacon. Otherwise, you get most of that benefit without much cost if you make Facebook login optional. Sep 27, 2011 at 20:19
69

I'm going to be blunt. Any site that only allows me to sign up using FaceBook is a site I will not use. And I'm not alone in that - if you check out any of the debates on Spotify's decision to do likewise, you'll see a lot of negativity about the idea.

If you want to use a third party provider, give a choice. Limiting it to one provider only is not a good idea for customer growth, particularly if the provider is divisive. It also ties your fortunes to that one provider which is not a good idea either.

4
  • 8
    I came into this thread to say exactly this. So, +1. Sep 27, 2011 at 17:21
  • 8
    I do not, nor will I ever, have a personal facebook account.
    – horatio
    Sep 27, 2011 at 20:13
  • 2
    Remember, OpenID is another great alternative to include along side of Facebook. Sep 28, 2011 at 21:00
  • 2
    +1 for your last sentence. As a business, you want to minimize your risk and tying yourself to a single provider does the opposite. What happens if Facebook goes the way of MySpace? In the space of a year, your business is hurting. Sep 29, 2011 at 16:22
22

While I agree that having "too many options is not a good UX", I would not say that having 4 or 5 options is too many.

Your question also somehow suggests that you need to have your own sign-in procedure, or a standard one. I don't see why you could not have a combination of both.

Look at how this very website does it:

enter image description here

You have a clear choice between a number of well known sign-in methods or you can choose their own sign-in method. ther is even an option "show more login option" for the less known possibilities.

I do not consider this to be bad UX, in fact there are very few websites that let me log in this easily.

to answer you "why" question: - quick sign-in procedure possible with well know, easily recognizable external accounts - still the possibility to create an own login, separate from you other accounts if you don't trust this. - All this is offered in a clear and nice manner.

7
  • 13
    I've long found StackExchange's login screen to be confusing and verbose, so I don't think it's an especially great example.
    – Rahul
    Sep 27, 2011 at 10:45
  • 1
    @Rahul: Really? Why? Would it be useful to start a discussion/topic on how to create a more userfriendly sign-in procedure specifically for stackexchange? I Q&A website about UX should have a sign-in procedure with good UX... Sep 27, 2011 at 11:04
  • 5
    As a counter point... I have found SE's log in screen to be easy and awesome. As explained all the options are right there. For having so many options, how could it get easier?
    – WernerCD
    Sep 27, 2011 at 12:58
  • 1
    I preferred it when I didn't have to click "Show more login options ..." to provide my OpenID URL, but maybe I'm part of a minority on that one. To aid discussion, here is a collection of OpenID/OAuth screenshots.
    – deizel.
    Sep 27, 2011 at 13:48
  • 1
    For me the most annoying thing about the SO registration was that it required OpenID instead of allowing a simple email registration. I signed up several months later because of that since I was too lazy to evaluate which OpenID provider I want, figure out how to configure my browser in a way that OpenID works,... Sep 30, 2011 at 10:30
17

If you want to restrict the type of services they can login from, at least provide a "signup with my email" fallback for people who don't have an account for any of these service, otherwise they would have to signup to two services instead of one.

8

The question you might need to answer yourself is what benefit are you offering by only allowing Facebook? Does it integrate with Facebook in some way? In doing this, who are you (either intentionally or unintentionally) excluding?

Have you done research that shows that your target audience are happy to share their Facebook credentials with a third-party site? Or that they all use Facebook?

Apart from a benefit of not needing to remember another username/password combination, be mindful of the fact that some individuals may want to keep things separate. Given the choice, I'd always let them decide between using an existing account, or creating an entirely separate account.

6

If you know that all of your users will have a facebook account that they are happy to use to sign up for this, then just using facebook is probably OK. However, even though I have a facebook account, I do not normally use it to sign up to things with, so for me, it would be offputting.

2
  • I think that allowing users to use - say a Twitter or Google account as well - would be reasonable, again assuming that your clientelle are liable to have one of these. Or whatever is appropriate to your clients - LinkedIn may be more appropriate than Twitter. Providing too many options is probably not good for a mobile app. But providing too few is also bad. It is a delicate balancing act between these two. Talking to your users is the only way to get the balance right. Sep 27, 2011 at 10:32
  • 3
    This answer addresses a fundamental assumption many users make. I've guided a few people through third party signup processes and most, when given the option to use Twitter or Facebook, said "I don't know this site and I'm NOT 'giving them my Facebook account's". Some of these people were very advanced computer users. Don't assume your users fully understand the consequences of anything - and that works from both ignorance and over assumptions about how a system behaves. Sep 27, 2011 at 14:58
6

Absolutely not. You lose so much more than you gain with Facebook sign-on: control of the sign-on experience, the ability to chart your own course with your service, the first point of contact with members. Moreover, you'll cast your members into a realm of uncertainty about what will and will not be shared about their activity. Should Facebook sign-in be unavailable at any time, you're stuck until they fix it.

As an option, sure. But relying exclusively on a 3rd party, especially one known to make sudden and controversial moves around member privacy, is anti-experience.

6

You need to brainstorm and ask yourself the question: "What would I do differently with the product if I knew that all of my users were on Facebook?"

The answer could be "not much", in which case you should allow other logins.

If, however, in five minutes you can come up with killer features that you can implement with the assumption that everyone is on Facebook, then going Facebook-only is worth considering. Also, being able to make such assumptions in your code may speed up your development.

Another consideration: Depending on your target users, it's likely that the vast majority of users are on at least one social network, and there are various ways that social network users can spread news of your application virally. So you might require (or at least highly encourage) that people log in with credentials that are most likely to allow them to distribute your application virally (likely those with popular Like/+1/share buttons) at the expense of some users that are not as likely to help you grow your user base.

Practically speaking, if you are going to use multiple logins, you might decide start with two (just to make sure your code is factored appropriately) and then add more as you have time.

[disclaimers: I work on Facebook Platform, although these are my personal opinions.]

3

If you're going to pick one "must-have" for logins (as far as social networking goes), go with Twitter. Twitter doesn't shut down your profile after the investigation team finds out your using (gasp!) a handle!

That way you've got the auto-sign in, plus the (relative) anonymity. The "Facebook factor" is usually a deal-breaker for me when choosing my registration.

1
  • +1 for Twitter. They even allow (double gasp!) multiple accounts! So you can have your primary Twitter account, and a separate one that you just use for authenticating, if you want. And don't ask for permissions you don't need - if you ask to post Tweets or read my DMs, I'll turn around and leave. (Edit: Really, StackExchange? Return submits in a comment but adds a line break in an answer? That's poor UX right there :)
    – John Y
    Sep 29, 2011 at 10:04
3

Is being on Facebook a requirement for all of your users. Does your site depend on the tools available through a Facebook association? Is your site important enough to make me create a FB account (i do not have one).

Personally, I would advocate the use of multiple (openID) logins for only specific type of sites. Leaving comments on blogs are a good example.

If the user expects to find some soft of history, such as past orders or reputation, offering multiple options can result to confusion. It took me few months to remember that i did not create a StackOverflow account, but used the Google login instead. If that happens on an e-commerce site, users might start disputing charges, or place duplicate orders.

2

I don't think you should limit only to Facebook logins, unless you are doing a Facebook app. And I think we are now well into an era of open authentication schemes that we shouldn't even be asking that question anymore. Users should expect you to support any of the major credentials they bring to the table.

Fortunately, we've also moved beyond the days when this all meant complex custom integration and coding.

For the past couple of years I've been using janrain engage (previously RPX) to add authentication whenever I need it for public sites.

  • You don't need to hum and har about which services to support; they can handle pretty much every auth scheme you have heard of (but you can choose to use only some of them if you want)
  • they have done a great job of making the sign-in screens simple, easy to use, and they plugin nicely to your site. I think they have done a great job with the ux, so you don't have to do much more other than decide the various ways to fit into your design. It is very easy for users to select the login service, and when they return it will remember which
  • you don't need to pay programmers to develop and maintain every security option (and it is always changing).. That's what janrain have to do.
  • they normalize all the attributes they might get from different services into a common profile, so you get access without needing do all that mapping and maintenance yourself. There is even user mapping (i.e. So the user can be the same person/account from your perspective, whether they login with twitter, fb etc)
  • there is a free version, but even the paid versions are very reasonably priced (especially when you count the real cost of integrating yourself and maintaining it over time)

I recommend you check them out. It certainly beats reinventing the wheel (and paying programmers to do it also). It does impose some design constraints which I think in most cases are so minor compared to the benefits, but you would need to make your own judgements.

PS: I should add that janrain is not the only option out there for this - but it is the one I know best and have the most experience with.

2

Like others have mentioned, I wouldn't rely solely on a single service. I'd combine a conventional email/password registration method with something like Facebook or Google.

In 2009 I did the StackExchange thing and created a login screen for Regex Hero using the OpenID selector included in the DotNetOpenAuth project. The problem is that the user can be paralyzed by choice. For awhile I had some instructions in place telling the user to go to MyOpenID to register if they don't have an account with any of these providers. As a result there was an unusually high number of users signing up with MyOpenID. I think the problem is that people weren't actually reading the instructions and clicked the link because that's what it looked like they had to do to register. I've actually removed these instructions completely and that has helped somewhat. But I think it's still a culture shock for some people to see so many choices in front of them.

But there's one profound statistic from Regex Hero that has helped me -- 72% use Google. Granted, I don't have an option to log in with Facebook so I can't make that comparison. But Google is obviously a very popular option.

So I used that knowledge to design my login/registration pages at SilverlightXAP.com...

enter image description here

As you can see, there are only two options. Either use an email and password, or use your Google login. This keeps the UI simple and easy to understand. And it's working well with 39% using Google in this case.

1

There is an aspect of security here as well.

By limiting registration opportunities, a malicious user can acquire access to all services by stealing control of the registration site solely.

5
  • Because google will lose my account information before Tedd's Bait Shack online-ordering-form database, right? Sep 27, 2011 at 18:36
  • No, of course not, but when all signups are centralized, the security risks are greater. We used to recommend people having different passwords on each service, what has changed?
    – Velkommen
    Sep 28, 2011 at 16:22
  • 1
    1,000,000 sites were compromised and lost credit card information. "Multiple passwords" is a usability fail as well, as users can't remember N passwords of complexity K, where K is sufficiently hard enough to defer a hacking attempt. Go read one of the million articles in favor of OpenID, and you'll get a picture of what's happened in the past 15 years. Sep 28, 2011 at 16:26
  • Thanks for the OpenID tip. After reading some - I see that facebook already joined the OpenID community. But of course there are still some cons discussed. Security will never be a black/white situation.
    – Velkommen
    Sep 28, 2011 at 18:36
  • Fair enough. Passwords are still an issue, but I trust google not to lose my CC even if my password is compromised, although I guess I should have been able to say the same thing of Sony. Clearly bigger isn't always better, but I trust google, amazon, and facebook at least. Hopefully that trust isn't destroyed at some point. Sep 28, 2011 at 19:03
1

Can you analyse your existing user base to see which of Facebook, Twitter, Google+ etc. they use?

If you can then you could just target the ones that will cover 90% (as a figure picked out of the air) of them to include on the main page and the rest can be made available via an "other" link.

If you keep this information up to date then you can modify the sign in page to reflect the most current information.

1
  • The site is probably not live yet. "Our target audience is subject specific (architecture, language learning, etc.) so we can't predict our customer audience very well yet."
    – Emil
    Sep 28, 2011 at 5:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.