I need to load a second page to enter my password in some sites. Why is this? I even have a site I use that has the username, password and 2FA entries on separate pages that each need to be loaded one after the other.
My uneducated guess is that it makes it harder for bots, but I can’t imagine it being that much of an impedance 🤷
Cheers!
This is called an identity first workflow and is used specifically so that they can route different people to different login ceremonies or providers.
They get your id first, and use that id to determine what your login ceremony is. Perhaps you’re with a business that they have an sso integration with and will send you on to your businesses sso provider, or perhaps you’re a local user for them and get a password screen next.
What pretentious asshole came up with that bit of jargon?
Me…
I will steal it for work without giving credit! Thanks!
Do it! I work in the industry and have found it to be very effective in conversations spanning varying levels of technical expertise.
A good analogy goes a long long way.
I love it
Lol I’ve never heard that term but it actually does kind of work. Auth is something that is very standardised with it’s communication between the FE and BE so the login flow could be compared to a ceremony. Kind of a silly way to describe it though
I’m sure we can work daemons in somehow
That doesn’t explain why my Synology NAS does it, though, because I don’t believe the web portal has the ability to handle different authentication flows.
I think it might also be a barrier against brute force attacks.
Synology offers cloud services and business level support for their enterprise products. They do support different authentication workflows, they are just not all included with the consumer products.
I’ve never used Synology stuff but it could be future proofing or a default feature of the authentication service/provider they’re using (if they are using one).
For a NAS, it actually seems like something corporate customers would very much want to have SSO support for so I’d actually be surprised if there wasn’t some way to set it up already
The one thing MADE for JavaScript and no.
It’s often implemented with JavaScript, yes