New Shibboleth IdP Login page mockups

[Ryan Larscheidt]

Unless most IdP operators have single sign-on disabled, I'm not sure I understand why the login page should focus on the Service Provider.  The login page is displayed when the user needs to (re)authenticate, but not when they're SSO-ing into that second or third Service Provider, so most of the time the SP information won't be displayed.

Also, we've seen that tailoring the login page to display SP-specific information causes users to think the IdP's login page is actually the SP's login page.  As you can imagine, this perpetuates confusion about federation and single sign-off, because users don't realize that the IdP even exists.

I understand there are some reasons to show Service Provider information in the IdP, like for attribute consent (uApprove) or a logout page that shows the user every SP they SSO'd into this session (unimr-logout), but not the login page.

Am I missing something?

Ryan

On Dec 25, 2012, at 16:07 , Tom Scavo <trscavo at gmail.com> wrote:

>> The Shibboleth logo won't be in any default pages going forward. I removed
>> it from the SP and I'll be doing the same to the IdP. If you want to have
>> a placeholder in the design of course, that's up to you, but I think it
>> falls more generally under the heading of how you would accommodate all
>> the information about the IdP organization in the page that people tend to
>> include.
> 
> I think that's the wrong approach in general. The Unicon login page,
> which focuses on the SP, is a better approach, I think.
> 
>>> Yes, if a SP logo was to be included, that would need to be accompanied
>>> with strong recommendations on the sizing/characteristics of such. I'm
>>> not myself a fan of including such, but I know there are at least a few
>>> folks that think including a SP logo would be a good thing.
> 
> As an example, the Unicon login page design would accommodate an SP
> logo just fine.
> 
> Tom
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 7327 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/dev/attachments/20121225/9655eb1f/attachment.bin