Login page may be a bit disappointing

[gwarf]

When willing to login users are facing a form with the traditional user and password fields, but this only works for local users, and I was assuming that nobody should be using local users (to be clarified in fact, but having everyone going through the EGI CheckIn may, among other things, simplify/centralize some things related to policies/information/privacy/...).

The With EGI may also be not that much evident, as users are allowed to login using their own IdP.

[brucellino]

Thanks @gwarf - Just to re-iterate: when we are out of stealth mode and more importantly, entering some form of supported operation, everyone will log in with CheckIn there will be no local accounts, except one or two in case check in fails 🙏

The fact is that we need to redirect users in some way to the WAYF.

Would you consider a good setup one where a user clicks on "Login" and the next page they see is the CheckIn WAYF that asks them to select an IDP ?

The one thing we can do is have a pinned topic describing how and why we use CheckIn, with some links to relevant information. All new members would see this, as well as unauthenticated people, but it could be dismissed after first login.

What do you think ?

[gwarf]

The fact is also that for the time being it seems people are able to create local accounts, so it may be quite confusing/problematic too.

It may be good to have a bit more context to prevent them trying to create a local account or to move this to a "secret page" and have, as you proposed, the WAYF shown directly after having clicked Login. (and Sign Up should be hidden too).

Having to read a topic prior to log-in seems not that friendly/easy, if we need to explain how to log in, there is a problem ©️.

[enolfc]

I agree with @gwarf here Log-in should be Check-in only, no need to explain anything: click on login goes to the WAYF. If local accounts are needed (not sure why?, can we do all administrative stuff via the ansible roles?) the way to log in with those should be hidden for most users.

…

On 30 Apr 2018, at 16:32, Baptiste Grenier ***@***.***> wrote: The fact is also that for the time being it seems people are able to create local accounts, so it may be quite confusing/problematic too. It may be good to have a bit more context to prevent them trying to create a local account or to move this to a "secret page" and have, as you proposed, the WAYF shown directly after having clicked Login. (and Sign Up should be hidden too). Having to read a topic prior to log-in seems not that friendly/easy, if we need to explain how to log in, there is a problem ©️. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.

-- Enol Fernández EGI Foundation - Cloud Technologist Skype: enol.fernandez.egi

[brucellino]

Log-in should be Check-in only

We all agree on this point !
There is only one reason to keep local logins and that is if CheckIn for some reason fails. This is not part of the design though, it will always only be a secret backdoor.

The only reason you're seeing the "sign up" page there is because I haven't finished #17 yet...