cis14 google's account chooser
TRANSCRIPT
Streamlining Login with an Account Chooser
Google Case StudyAdam Dawes
[email protected]://goo.gl/VKxhkP
Google Confidential and Proprietary
How did we realize we needed a different login flow?Google Apps configured to auth via SAML
“Idiot Box”
Google Confidential and Proprietary
How did we realize we needed a different login flow?50% of users that click sign-up have an account
Google Confidential and Proprietary
Authentication ritual: typically performed as a single act
Really has two parts: identifier and credential
Google Confidential and Proprietary
What’s possible when you separate them?Clean federation flows
Enterprise SAML customers
Consumer IDPs
Google Confidential and Proprietary
What’s possible when you separate them?More flexible login challenges
Google Confidential and Proprietary
But what’s the UX when you separate them?
But what if you begin remembering the identifier on the device...
Google Confidential and Proprietary
What happens when you save the identifier locally?Better login conversions
● Name and photo for easy account recognition
● No typing email address!(millions of cries of thanks from mobile users)
Google Confidential and Proprietary
What happens when people switch user accounts on a device?Account Chooser
● Simplifies login for users with multiple accounts and people who share devices
● Useful in other flows like OAuth consent
Google Confidential and Proprietary
Account Chooser and avoiding double consent
Google Confidential and Proprietary
Account Choosers don’t need to be branded
Google Confidential and Proprietary
Wouldn’t all sites benefit from having a shared account chooser?OpenID Foundation accountchooser.com project
● Preserves privacy - all entries stored locally in HTML5 storage
● Easy for developers to integrate
● Google now bootstrapping entries, others to follow
● Google to move towards using accountchooser.com in the future
accounts.google.com
Google Confidential and Proprietary
The Account Chooser pattern is taking offAndroid
Google● Preserves privacy - can be called
without any privileges for Google accounts
● Exploring way to represent all accounts on the device
Yahoo● Built directly into their own app
Google Confidential and Proprietary
The Account Chooser pattern is taking offAppleTV
Google Confidential and Proprietary
Account Chooser: As complex as you want to make it
Google Confidential and Proprietary
More information
www.accountchooser.net