okta / okta-signin-widget

HTML/CSS/JS widget that provides out-of-the-box authentication UX for your organization's apps
Other
376 stars 319 forks source link

FR: "remember my username" option #1726

Open nicotriballier opened 3 years ago

nicotriballier commented 3 years ago

I'm submitting a

Today, from the same device, same browser, end users have to systematically type in their username in the login page. Goal is to eliminate that unnecessary step for subsequent login on the same device/browser.

Expected behavior

Thanks in advance!

brettritter-okta commented 3 years ago

@nicotriballier - Thanks for the request. I'm a bit confused though, as we do offer a "remember me" feature that stores and populates the username: Screen Shot 2021-03-05 at 12 45 35 PM

This does not include your third bullet point (though we have workarounds), but before digging into those details I want to make sure we are talking about the correct feature.

nicotriballier commented 3 years ago

Hi Brett, today remember me only prefills the username. You still have to click on "next" image

Goal is to completely skip the username filling step and go straight to whatever the next step should be (MFA, del-auth to an IDP, x509 cert verification etc.)

thanks

swiftone commented 3 years ago

@nicotriballier - I'll pass the request on, but there are notable UX concerns with putting a (different) user into a state where the first step is backing up - particularly when those steps might be on a different server entirely (such as some MFA/IDP scenarios).

As a workaround I'd expect you can add a piece of JS to the page to detect if the username value is filled in on page load and click the "Next" button for them.

nicotriballier commented 3 years ago

@swiftone thx. FYI this workaround would be feasible in a CIAM scenario since there's a custom DNS and we have full control on the sign-in page html/css/js, but not in a Workforce context where we don't have control on the js code of the page (no custom DNS, no self-hosted sign-in page).