4
votes
1answer
71 views

What is the proper way to provide social media authentication: in login or register form?

We provided standard login/registration forms for providing email and password, but I'd also like to allow user use my website after oAuth authentication. Should they be able to register or login via ...
21
votes
2answers
545 views

What's better for invitation emails: a temporary password or a one-time login url?

Our web app allows our customers to invite their collaborators into their account. They can submit the new user's email address, and our app sends the new user an email inviting them to login. Once ...
0
votes
1answer
125 views

How should I go about integrating Mozilla Persona in a website?

For those who've never heard of it before, Mozilla Persona is a single sign-on method that's pretty strict on privacy. For me, as a website administrator, it means that I don't need to ask the user ...
7
votes
3answers
2k views

Should my app send a confirmation email on user registration?

I'm grappling with the user registration experience for my application. I'm considering this model: User enters... Username Password Password confirmation Email address The app displays a ...
4
votes
3answers
336 views

Is offering more than one openid/social-sign-in option a good idea?

Lots of sites nowadays offer the option to log in via Google, Facebook, LinkedIn and so on, and sometimes a standard username/password option as well. While this goes a long way toward helping users ...