confirmation that a user is who they claim to be, either by verifying what they know (password), what they have (a key) or what they are (fingerprints).
14
votes
8answers
2k views
How to tell the user his login credentials are incorrect?
When a user has entered incorrect details into a login form, is it better to tell them:
The username or password you have entered is invalid.
or
The user name you have entered is invalid (for ...
4
votes
3answers
225 views
Is offering more than one openid/social-sign-in option a good idea?
Lots of sites nowadays offer the option to log in via Google, Facebook, LinkedIn and so on, and sometimes a standard username/password option as well.
While this goes a long way toward helping users ...
20
votes
5answers
847 views
Whats more user friendly local authentication or remote authentication (OpenID, OAuth)
from a usability perspective only (not security) what do users find more comfortable
A site with it's own login page (need to sign up but then easier to login)
or a site with remote authentication ...
4
votes
4answers
206 views
Business application: Is it better to redirect or pop-up for re-authentication?
This question is geared for a line of business application someone would pay for, not a general public facing website.
Is it better to redirect for authentication/re-authentication or show a pop-up?
...
4
votes
2answers
146 views
How to request a third-party login within a seperate mobile application
I'm designing a mobile app that requires the user to log-in with their LinkedIn account.
I feel I might have cluttered too much info into it, but everything seems to be important.
I want the user ...
