Dealing with Single sign-on (SSO)-enabled Domains

apple / password-manager-resources

A place for creators and users of password managers to collaborate on resources to make password management better.

MIT License

4.15k stars 449 forks source link

Dealing with Single sign-on (SSO)-enabled Domains #17

Open m33x opened 4 years ago

m33x commented 4 years ago

Hi,

when I sign into overleaf.com, I use the "Sign in with Google" button. In such cases, I use my password manager to remind me, "Hey on this website you used 'Sign in with Google'" by manually creating a custom entry in my password manager telling me exactly this.

Currently, there are two ways of handling this particular situation.

A) Use a field such as "username" for this information

B) Add the domain https://www.overleaf.com to my Google account entry

I do not have a good idea how to fix this particular issue, and I just wanted to spark some discussion how a password manager could ideally handle such cases in a user friendly manner.

Best, Max

mnoorenberghe commented 4 years ago

Federated Credentials of the Credential Management API are intended to address this case. Unfortunately that requires sites to adopt a new API though…

m33x commented 4 years ago

Google is working toward solving this problem for quite some time. It seems with Android 11 they made some progress, combining Sign-In with Google with Smart Lock for Passwords and the Credentials API in a new API called „One Tap sign-in on Android“.

More here: https://www.youtube.com/watch?v=KFGthqwDmc0

and here: https://medium.com/androiddevelopers/one-tap-sign-in-for-android-apps-2259ce15bc2c

m33x commented 1 year ago

There is now offical support for this feature by 1Password. Technical details are unknown.

https://blog.1password.com/sign-in-with-anything-browser-beta/ https://blog.1password.com/sign-in-with-other-providers/

Video: https://www.youtube.com/watch?v=DULTEFQJcv0

1password-sign-in-with