1
vote
1answer
44 views

Dealing with Connected Social Accounts and Potential Orphans

Our application has the following signup paths: Twitter Connect Facebook Connect Email/Password Once you signup with one, you have the option to connect either both social account (in the case of an ...
4
votes
1answer
101 views

What is the proper way to provide social media authentication: in login or register form?

We provided standard login/registration forms for providing email and password, but I'd also like to allow user use my website after oAuth authentication. Should they be able to register or login via ...
6
votes
3answers
435 views

social sign in redirect vs popup window

I have seen that most websites usually open the "login with Facebook" page in a popup window, but there are also some websites (like stackexchange) that just redirect the browser without opening a ...
4
votes
2answers
164 views

How to ask for a user's identity?

My company is working on an internal phone application to be used by many users that requires authentication. Based on historical data, we can assume the likelihood of a user's identity at a given ...
5
votes
3answers
190 views

Logging in with email only

I'm working on a blog and there will be an option to post a comment. I could implement registration with username, password and email — the standard way. I could implement 3rd-party authorization ...
0
votes
1answer
133 views

How should I go about integrating Mozilla Persona in a website?

For those who've never heard of it before, Mozilla Persona is a single sign-on method that's pretty strict on privacy. For me, as a website administrator, it means that I don't need to ask the user ...
7
votes
3answers
2k views

Should my app send a confirmation email on user registration?

I'm grappling with the user registration experience for my application. I'm considering this model: User enters... Username Password Password confirmation Email address The app displays a ...
5
votes
4answers
1k views

How do I best tell a user that his/her account will be locked if they enter the wrong credentials too many times?

We are going to add an additional layer of security to our product by locking user accounts for a short period of time (configurable in the product, but probably 5-10 minutes) when a user has tried to ...
4
votes
2answers
168 views

How to request a third-party login within a seperate mobile application

I'm designing a mobile app that requires the user to log-in with their LinkedIn account. I feel I might have cluttered too much info into it, but everything seems to be important. I want the user ...
3
votes
4answers
581 views

Password validation in login form

In registration form, I have client side validation for strength of password. For example password should be not less than 6 symbols, consists at least 1 digit, and at least 1 letter. For example: ...
5
votes
4answers
306 views

Biometrics Activated UI

I'm having a problem regarding a user interface with bio-metrics inter action in employee logging in/out. The employee needs to choose whether he/she will login or logout and enter his/her employee ...
6
votes
1answer
119 views

What OpenID log-in screen is appropriate for people who don't understand SAML, OpenID, or Federation?

Every person that I've introduced to Stackexchange has had the same question/problem... that is they are confused by options to log using "gmail" or "hotmail" and assume that this is an email ...
2
votes
2answers
213 views

When is user authentication really necessary?

Better said, how much harder is to mantain a forum/message-board/community webiste with unauthenticated users and what would be the benefits and disadvantages in comparison to an account-based one? ...
0
votes
1answer
144 views

When should “Log on” or “Log off” be used? [duplicate]

Possible Duplicate: Using “Sign in” vs using “Log in” I'm porting an old application that has a "Log on" screen. When would I use "Log on" vs the alternatives (Sign ...
2
votes
6answers
793 views

WebApp User Login Screen

I am currently considering options for a web/intranet application login screen and this seems like a good place to share. Not much work has gone into the current screen since creation and it exists ...
20
votes
5answers
1k views

Whats more user friendly local authentication or remote authentication (OpenID, OAuth)

from a usability perspective only (not security) what do users find more comfortable A site with it's own login page (need to sign up but then easier to login) or a site with remote authentication ...