Open junosuarez opened 10 years ago
One of the key things Persona got right, that should be copied: Websites want an e-mail address, users understand e-mail addresses.
They are by far the lowest friction way of a user choosing an identity provider. We just ask for an e-mail as step one, and if their e-mail provider supports the protocol we can fast-track their login. The reality is that every website I login to on the internet asks for my e-mail so that's not a major stumbling block for user adoption.
The Mozilla team published this after-action report on their wiki: https://wiki.mozilla.org/Identity/Persona_AAR