Questions tagged [authentication]
use this tag for questions related to authentication in the context of security
131
questions
3
votes
1
answer
81
views
Evolution of authentication-based navigation
Consider the case where an unauthenticated user sees a main navigation with a few items:
In the old days, someone with admin privileges might log in and simply see additional items exclusive to their ...
- 12.1k
3
votes
3
answers
907
views
Two factor authentication in a single form
We are working on implementing a Google two factor authentication in our app. Each customer can turn 2FA on and off for their users in app settings.
There was an idea to tweak this functionality. We ...
- 506
3
votes
2
answers
330
views
When is user authentication really necessary?
Better said, how much harder is to mantain a forum/message-board/community webiste with unauthenticated users and what would be the benefits and disadvantages in comparison to an account-based one?
...
- 623
3
votes
1
answer
264
views
Looking for 'planner' design patterns and opinions
We are designing a revamped part-time studies course catalogue at the post-secondary institution where I work. One of the features I have included is an authenticated planner for saving and ...
- 1,157
3
votes
5
answers
941
views
What happens when users are given a secret URL instead of a username/password?
I'm on the fence in regards to whether I should implement user accounts or secret URLs. There are pros and cons to both, and I'm currently leaning in favor of the secret URLs because of the simplicity:...
- 339
3
votes
1
answer
307
views
How to manage credentials information to the user?
I've created a plugin for an editor.
This plugin gets some information from the project and shows you all the related issues, getting the information from an external application (Github, gitlab, ...
- 31
3
votes
2
answers
103
views
Status feedback problem
We have a mobile application. To register in our application you need to enter your phone number. After that, you receive an SMS with a code you need to enter to confirm your phone number.
There is a ...
- 741
3
votes
1
answer
112
views
Mass user authentication for a bracket system
I'm currently setting up a layout for a website that's going to be a sort of "bracket" website, where users can sign up and they can be approved/denied by an administrator. I'm currently at a ...
- 133
2
votes
5
answers
2k
views
Do people expect to mistype their passwords?
I expect people have to type in passwords pretty regularly. Sometimes if you haven't typed it in for a while but end up faced with a login prompt, you think you remember the password, type it in, and ...
- 3,580
2
votes
6
answers
1k
views
WebApp User Login Screen
I am currently considering options for a web/intranet application login screen and this seems like a good place to share.
Not much work has gone into the current screen since creation and it exists ...
- 23
2
votes
1
answer
78
views
Should web sites have their own authentication?
If I am designing a web site that interacts with the same user over time via email or other messaging mediums, should I allow account creation on the web site using a traditional username/password/...
- 123
2
votes
1
answer
225
views
User Authentication/Timeout for web-app with personal Information
The concept behind "Remember my Username" and even allowing browsers to save your "username and password" for this site seems like it could be controversial.
Given that different audiences prefer ...
- 828
2
votes
1
answer
291
views
iOS apps log users out when upgrading to a new phone
Why do so many apps log users out after upgrading to a new phone ? (ex: Gmail, Slack, Instagram).
From a technical POV it's easy to keep the user logged in after a phone upgrade.
Is there any upside ...
- 123
2
votes
3
answers
102
views
Does onboarding include sign up?
I'm designing a matchmaking platform for influencers and marketers. I want to create a secure platform that verifies identities (both influencers, and marketers that work for legit brands).
I am ...
- 21
2
votes
2
answers
3k
views
What are the pro's and con's of an extended user session?
When having a portal where due to regulations, the content displayed inside must be accessed through user authentication (username / password). Are there best practices / pros and cons of having ...
2
votes
1
answer
121
views
In Single Sign On what does SAML "enabled" control do or mean?
I am currently working on the redesign of SSO signup process/form and want to understand what enabling SAML control implies.
The rationale being that if an organisation does not have SSO enabled the ...
- 6,996
2
votes
1
answer
228
views
Best way to add account providers?
I briefly looked at spotify and I found that they use 2 providers: Themselves and facebook. Ie I can log in to spotify with facebook. But then it asks me for my spotify account when I downloaded the ...
2
votes
1
answer
274
views
Should users be given a way to link a password after social auth?
Obviously it is very common for sites to allow log in using both the traditional email/password as well as social authentication using Facebook, Google, Twitter etc.
If a user creates an account using ...
- 121
2
votes
2
answers
302
views
Layman's term and description for 2-Step Verification process
Many of us are probably used to seeing or hearing the term 'Two factor authentication' or '2 Step Verification' process by now, although we are probably more familiar with the interaction involved (i....
- 26.7k
2
votes
1
answer
169
views
different pricing for new customers VS. existing customers
how would you go about showing different prices to different users?
currently working on a mobile network's website, and its been requested to show different pricing depending on if the user is new ...
- 95
2
votes
1
answer
243
views
When using embedded browser authentication, how can I increase user trust?
I have run into this situation before but I will speak specifically about a current project, since it is a good example.
I am building a desktop application that uses the Stack Exchange API, and ...
- 2,612
2
votes
5
answers
283
views
is replying to an sms a reliable way of authenticating a response
I have a web app which will relay messages from my desktop applications (which is a workflow application for my client).
A typical message would be - 'you have booked your pc in for a service and we ...
- 121
2
votes
1
answer
209
views
If a user has created an account on my iOS app using Google, how should I handle their effort to also create an email account?
Imagine a user logged into my iOS app using their Google account. Months later, they are trying to create an account using their email address (the same one connected to their previous Google social ...
- 21
2
votes
3
answers
109
views
Visual indication of special privileges
I'm working on a mobile app for android and iOS that lets you manage sports teams. You can follow any team, but can only manage those your account is associated with (You're the coach, for example)
...
user57078
2
votes
1
answer
213
views
A better alternative to asking secret questions and answers when logging in to a banking site
It seems to be a common practice of credit card and banking web sites to ask answers to secret questions each time you log in from a new computer (for obvious reasons)
There are many frustrating ...
- 15.9k
2
votes
2
answers
1k
views
Which Remember-Me option is the best?
Basically, there seem to be three different behaviours of "Remember Me" authentication:
Definite:
After a successful login, a user doesn't have to provide their credentials during a time span with a ...
- 3,897
2
votes
1
answer
69
views
Should authenticated users still see the app's public home page
Let's take two examples:
GitHub → the public page at github.com is a presentation of GitHub's features. Once a user is logged in, he never sees this home page again: github.com become the user's ...
- 123
2
votes
1
answer
127
views
How to design interactions for guiding users to install an application during sign up process
Application objective
We have a mobile application where a sales employee will be able to login to see his sales stats for the month. The data available to the employee is restricted to only his own ...
2
votes
4
answers
95
views
Will users tolerate starting over when their key identification is changed?
The main function of my app:
Two users select each other by phone number
Neither of them is aware of the other at the beginning
Based on certain activities over time, an event happens for both
Due ...
- 123
2
votes
1
answer
70
views
Example workflow when changing a site's identify provider
I'm switching a site from ADFS/AD to Azure B2C/AAD and require users to reset their password. Users will also see different log in screens. I'm struggling to find an approach where users won't be ...
- 125
2
votes
2
answers
406
views
Is there a name for the UX pattern where you enter a code from an unauthenticated device on an authenticated one in order to login?
Several services such as YouTube, Plex, and XFINITY use a pattern in which an unauthenticated device displays a code for the user to enter on an authenticated device. When the user enters the code on ...
- 123
2
votes
1
answer
600
views
What is the best way to integrate OAuth into an existing authentication system?
I'm currently working on a project to integrate OAuth with a pre-existing, in-house auth system. We have uncovered a number of potential issues, and I'm surprised to find so little online about what I ...
- 131
2
votes
4
answers
747
views
User migration when some users signed up to the old system and some to the new one
Our team has a challenging UX issue we are trying to solve neatly. We have rebuilt an existing system from scratch and there is a technical constraint that old users will need to re-register to the ...
- 121
2
votes
2
answers
2k
views
Get the user to accept Terms & Conditions when signing up with OAuth
The register form I'm working on allows the user to sign up using their Facebook account or to create a new account by typing their email and password. Here a mockup:
Currently, clicking on the ...
- 51
1
vote
4
answers
3k
views
How to clearly distinguish a login page from a register page?
I recently conducted a series of user experience evaluation sessions for a prototype application that had been developed with the goal of capturing user experience bottlenecks and other issues.
Each ...
- 113
1
vote
4
answers
10k
views
What is the terminology for the page to which the user is redirected to, after successful login?
I did quite a search for this both online and offline, but couldn't find a satisfiable answer. Some of my colleagues suggested terminologies like Dashboard, Home page, Welcome page, landing page, etc. ...
- 111
1
vote
3
answers
121
views
When entering data, should the user be authenticated on clicking "Create" or "Save"?
Having the two options:
Check if user authenticated upon "Save" button click (when the input dialog is shown and filled in with the data)
Check if user authenticated upon "Create" button click (...
- 111
1
vote
2
answers
263
views
UX Design where password is optional
I have a web site where some users authenticate with email/password and other users only require an email address to authenticate.
I'm trying to make the most natural login screen, but I'm struggling ...
- 185
1
vote
3
answers
319
views
Is email field assistance still necessary?
For registration forms, it seems the trend now is to allow any password a user wants, as long as you inform him if it's weak.
With this in mind, should we still validate email fields on the client ...
- 683
1
vote
2
answers
152
views
Is a process secure if it's not perceived as such?
We just finished research for an article on 2FA (Two-Factor Authentication) and, while writing the report on the insights, I got wondering on this particular finding: Our research indicates that most ...
- 37.3k
1
vote
1
answer
253
views
User signs up using their Facebook account logs and then logs in with their (same email) Google account. Now what?
Our web app (a personal calendar-management tool) offers both Facebook and Google as social login providers. Sometimes a user who originally signed up using a Facebook account tries to log in using ...
- 1,833
1
vote
1
answer
6k
views
Good UX practices for 2 factor authentication 2FA
I am designing a mobile app that must use two factor authentication. Do you know good practices or research in that field?
One of my concerns is that non tech savvy users may get lost or confused if ...
1
vote
1
answer
116
views
Authenticating / Validating a user, from an email/SMS invite
I'm designing a system whereby a company creates accounts for it's customers and sends an invite via email/SMS.
The system contains PII, so we need to be cautious with data security.
We need a ...
- 11
1
vote
3
answers
71
views
Best format and maximum length for manually typed authentication code
I need to send one-time codes with a relatively short expiration time (say 15 minutes). Potentially there may be hundreds of codes active at the same time.
What are suggested formats for this?
Any ...
- 133
1
vote
2
answers
317
views
Which social login should I use, Google OAuth2 or Google+?
Google supports 4 ways to "sign in with google"
OAuth
OAuth2
Google+
Google Apps
I want a generic "sign in with google", I'm not doing anything app-specific, so the last one is out.
Presumably ...
- 164
1
vote
1
answer
69
views
Quantifying the impact of offering alternative signup/login methods?
Nowadays it's common for websites to offer signup/signin methods that don't require making an account (email/password) for that specific site, for example 'Login with x':
Facebook
Google
Twitter
...
- 289
1
vote
2
answers
250
views
What would be the success criteria for user testing for 2FA authentication
i'm conducting a user testing session for a few prototypes. one of the prototypes of a feature i'll be testing is the 2 factor authentication.
Compared to other features which have more of an ...
- 10.6k
1
vote
1
answer
125
views
Button appears in two important locations and feels redundant
I'm building a log in page but ran into an issue with my nav bar. As you can see the "Log In" button appears in two locations.
What's the best way to approach this? To me it looks odd to have it ...
- 13
1
vote
3
answers
374
views
Giving user a preference to pick either TouchID or Pin login on iOS platform
As of iPhone5s we have technology like TouchID which is much secure way of authenticating user instead writing long complicated passwords. Although, we also have a pin login which does require minimal ...
- 13
1
vote
5
answers
433
views
How can I make a login form seem more trustworthy?
We have a web app where the user has to log in at the beginning. The login shows our company logo, the name of the product incl. logo of the product and the login form:
I showed this app to a test ...
- 595