Feature #114
Improve OpenID workflow, perhaps by restricting to small set of providers
Status: | New | Start date: | 2011-03-25 | |
---|---|---|---|---|
Priority: | Normal | Due date: | ||
Assignee: | - | % Done: | 0% | |
Category: | - | |||
Target version: | - |
Description
Problems:
- OpenID login/registration workflow is confusing
- OpenID URL is an unclear concept for common use cases because it depends on the provider
Likely current flow for OpenID use with this site (assuming user is familiar with OpenID):
- Go to login page
- Notice an "OpenID URL" box, wonder if we can just fill that in
- Decide we're not brave enough: click Register link instead
- Notice the title says "Register or login with OpenID" (the latter being a link); click that link
- Find ourselves back at login page
- Enter OpenID URL (assuming we know it; it's very hard to discover for Google accounts particularly) and hit Login
- Get sent off to OpenID provider for password (if not already logged in with them)
- Find ourselves back at registration page, facing an error message because of incomplete details; some fields may have been filled in, but we're still being asked for a mandatory username and password (why? especially why the password, if we're using OpenID?)
- Fill in all details, hit Register
- Wait for admin approval
- Blah, blah, blah
Nobody's going to use this -- I couldn't even remember how to use it myself when I tested it just now for the purposes of fact-checking for this report.
What we want is something like
- Go to login page
- Notice beneath the login box a separate link saying e.g. Log in with your Google account; click on that
- Get sent off to Google for password (if not already logged in with them). Note ideally user wouldn't have to supply the Google account name to this site at all, only log in to Google with it
- If we don't have an account here associated with the Google account yet, find ourselves back at registration page but with no password fields visible and (ideally) with the login name pre-filled to the closest available name to our Google account name. (If we did have an account here already, we should now be logged in to it.)
- Hit Register
- Wait for approval, etc