Skip to content

Improve Passkey or Security Key login flow #1814

@Diosbejgli

Description

@Diosbejgli

Is your feature request related to a problem? Please describe.
When logging in on a device that does not have a Passkey saved locally, or trying to login with a Security Key, the web browser does not indicate an option to login with those options. Admittedly, this is partially the browser's fault but perhaps there are ways to improve the login flow.

Who is affected by the problem?
Users who set up MFA, e.g. a Passkey or Security Key to allow logins with.

What is the impact?
Ease of use during logins.

Are there security concerns?
No

Are there privacy concerns?
No

Describe the solution you'd like
Any of the following options would improve the login process:

  • Split the Username entry to its own page, and requesting the right credential type for the account. For example, the same way as it is on Google.com sign-in page.
  • Add a Sign in with Passkey or Security Key button, just like on GitHub.
  • Allow entering a Username only and hitting Next to proceed to selecting an MFA device (e.g. Passkey or Security Key). Do not require the Password field to be filled.
  • Update the blue hint text under the login form to indicate that a right click may be required to select Passkey from another device to be able to select a Security Key.

Do you think this feature will require a formal design?
No, simple change to login flow.

Describe alternatives you've considered
See above.

Could this feature request need support from the Admin Committee?
No

Deployment approach
No

What is the proposed priority?
Not urgent

Provide a rationale for any/all of the above
It is unclear in the current login flow how to login with a Passkey if not stored locally, or with a Security Key at all.

Additional context

  • Passkey already present:
Image
  • No Passkey present:
Image
  • Right clicking on Username field reveals additional options:
Image

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions