Brian Ellin's talk on patterns that work in 3rd party authentication.

1. OpenID in 2010
Relying Party UX Overview and Lessons Learned
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
1

2. What is OpenID?
Authentication & profile import for easily
moving around the web
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
2

3. The OpenID Opportunity
Rethink registration and sign-in as it exists today.
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
3

4. Quick Engagement!
1. No new password at every site
2. No re-entering profile everywhere
3. No verify-email dance
4. Lower mental investment!
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
4

5. Take a step back
Don’t just bolt OpenID onto your existing registration
system as a password replacement. Treat it equally.
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
5

6. Simplify
1. Simplify Login/Register flow
2. Avoid lengthy registration forms
3. Engage quickly, ask for data as needed
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
6

7. Users are getting it...
but the interface is key.
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
7

8. OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
8

9. Button Driven Sign-in
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
9

10. OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
10

11. blink182.com
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
11

12. 3rd Party vs Email+Password
60% choose 3rd party on blink182.com
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
12

13. tigweb.org example
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
13

14. Interface is below the fold...
!"#$%"&
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
14

15. tigweb.org - improved registration page
!"#$%
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
15

16. NASCAR Style
Favicons can mean
other things
Share This, Follow, Become a Fan etc.
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
16

17. Best accompanied with a
clear message of benefit
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
17

18. 89% chose a 3rd party
instead of clicking login/signup
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
18

19. Combine Login & Register
For a single, simple experience.
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
19

20. Single entry point into system
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
20

21. Return experience is key
when offering many choices
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
21

22. Use immediate mode
when you can.
Sign-in without redirecting or opening a popup.
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
22

23. Avoid the full browser
redirect by using a
small popup window
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
23

24. openid.ui.mode=popup
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
24

25. Mobile Considerations
Don’t use a popup for iPhone and Android browsers.
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
25

26. Mobile + OpenID is great!
1. Typing on a phone is hard
2. No new password at every site
3. No re-entering profile data each site
4. Less mental investment!
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
26

27. Profile Data
Data transport on top of OpenID via AX/Sreg
email, first name, last name, country,
language, profile pic url, nickname,
gender, date of birth, postcode
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
27

28. Verified Email
Many providers issue an email address that they have
already verified. You don’t have to verify it again.
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
28

29. OAuth Hybrid
Piggybacking OAuth on top of OpenID for access to
Contacts, Social, and other rich APIs....
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
29

30. NASCAR Alternatives
brianellin@gmail.com
brian@janrain.com
bcellin@yahoo.com
brianellin@hotmail.com
me@brianellin.com
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
30

31. Who is your audience?
Build an interface and integrate with appropriate
providers.
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
31

32. A few years out
1. Only managing passwords at provider sites
2. Using a password at a non provider site will
be a foreign concept
OpenID UX Summit 2010
Brian Ellin / brian@janrain.com
32