confirmation that a user is who they claim to be, either by verifying what they know (password), what they have (a key) or what they are (fingerprints).

learn more… | top users | synonyms

8
votes
3answers
4k views

Should my app send a confirmation email on user registration?

I'm grappling with the user registration experience for my application. I'm considering this model: User enters... Username Password Password confirmation Email address The app displays a ...
2
votes
1answer
147 views

User Authentication/Timeout for web-app with personal Information

The concept behind "Remember my Username" and even allowing browsers to save your "username and password" for this site seems like it could be controversial. Given that different audiences prefer ...
11
votes
3answers
1k views

Is it bad practice not to allow users to create an account (versus OAuth or OpenID)?

When creating a website is it poor practice not to give users the option to "create an account"? Especially with rapid development, it seems more secure with less effort to offload authentication. ...
4
votes
2answers
182 views

How to request a third-party login within a seperate mobile application

I'm designing a mobile app that requires the user to log-in with their LinkedIn account. I feel I might have cluttered too much info into it, but everything seems to be important. I want the user ...
5
votes
4answers
447 views

Biometrics Activated UI

I'm having a problem regarding a user interface with bio-metrics inter action in employee logging in/out. The employee needs to choose whether he/she will login or logout and enter his/her employee ...
6
votes
1answer
126 views

What OpenID log-in screen is appropriate for people who don't understand SAML, OpenID, or Federation?

Every person that I've introduced to Stackexchange has had the same question/problem... that is they are confused by options to log using "gmail" or "hotmail" and assume that this is an email ...
5
votes
1answer
164 views

How important is social sign-up to attracting new users?

Many website, including this one, are using social sign-up to speed up new user registrations. I'd like to know what are the adoption rates of this service, and whether there are any pitfalls to using ...
2
votes
2answers
252 views

When is user authentication really necessary?

Better said, how much harder is to mantain a forum/message-board/community webiste with unauthenticated users and what would be the benefits and disadvantages in comparison to an account-based one? ...
1
vote
2answers
246 views

Authentication pop up on a desktop app: what if it is much bigger than main app window?

I am working on a desktop app that requires authentication. It allows federated authentication using different services, Google among them. Most probably, we'll use a pop up with a browser window to ...
0
votes
1answer
167 views

When should “Log on” or “Log off” be used? [duplicate]

Possible Duplicate: Using “Sign in” vs using “Log in” I'm porting an old application that has a "Log on" screen. When would I use "Log on" vs the alternatives (Sign ...
6
votes
2answers
387 views

How can I encourage users to authenticate?

I am working on a post-sale customer support project for a US high street retailer (for the rest of this post I will refer to them as 'Jon's Cellphones'). The program will enable customers who ...
2
votes
6answers
860 views

WebApp User Login Screen

I am currently considering options for a web/intranet application login screen and this seems like a good place to share. Not much work has gone into the current screen since creation and it exists ...
10
votes
5answers
716 views

Why would you, for a local authentication site, have usernames, instead of using e-mail address to login?

In websites where authentication is local, or mixed local and remote (e.g. OpenID), I still often see the question for a username. I can very well understand this in the case of twitter, where the ...
4
votes
6answers
454 views

Is there a way to disallow multiple votes from one user without forcing authentication? [closed]

I'm looking for a way to prohibit voting rigging (cache/cookie-clearing, etc.) without requiring the user to jump through hoops (registration, authentication, etc.). Any ideas?
4
votes
4answers
274 views

Business application: Is it better to redirect or pop-up for re-authentication?

This question is geared for a line of business application someone would pay for, not a general public facing website. Is it better to redirect for authentication/re-authentication or show a pop-up? ...