Streamlining Login with an Account Chooser

Google Case StudyAdam Dawes

adawes@google.comhttp://goo.gl/VKxhkP

Google Confidential and Proprietary

How did we realize we needed a different login flow?Google Apps configured to auth via SAML

“Idiot Box”

Google Confidential and Proprietary

How did we realize we needed a different login flow?50% of users that click sign-up have an account

Google Confidential and Proprietary

Authentication ritual: typically performed as a single act

Really has two parts: identifier and credential

Google Confidential and Proprietary

What’s possible when you separate them?Clean federation flows

Enterprise SAML customers

Consumer IDPs

Google Confidential and Proprietary

What’s possible when you separate them?More flexible login challenges

Google Confidential and Proprietary

But what’s the UX when you separate them?

But what if you begin remembering the identifier on the device...

Google Confidential and Proprietary

What happens when you save the identifier locally?Better login conversions

● Name and photo for easy account recognition

● No typing email address!(millions of cries of thanks from mobile users)

Google Confidential and Proprietary

What happens when people switch user accounts on a device?Account Chooser

● Simplifies login for users with multiple accounts and people who share devices

● Useful in other flows like OAuth consent

Google Confidential and Proprietary

Account Chooser and avoiding double consent

Google Confidential and Proprietary

Account Choosers don’t need to be branded

Google Confidential and Proprietary

Wouldn’t all sites benefit from having a shared account chooser?OpenID Foundation accountchooser.com project

● Preserves privacy - all entries stored locally in HTML5 storage

● Easy for developers to integrate

● Google now bootstrapping entries, others to follow

● Google to move towards using accountchooser.com in the future

accounts.google.com

Google Confidential and Proprietary

The Account Chooser pattern is taking offAndroid

Google● Preserves privacy - can be called

without any privileges for Google accounts

● Exploring way to represent all accounts on the device

Yahoo● Built directly into their own app

Google Confidential and Proprietary

The Account Chooser pattern is taking offAppleTV

Google Confidential and Proprietary

Account Chooser: As complex as you want to make it

Google Confidential and Proprietary

More information

www.accountchooser.net