2026-09-26 23:55 UTC
@amethyst@toots.n7.gg There is a good reason to request the username first with no password input, especially for accounts that dont have a password at all eg passkeys. But the ux can still be done well if attention is paid.
In Kanidm we fixed this by having a hidden password + totp field on the first username page, and then we stash those for the next steps so that its all prefilled for you.
Replies (1)
-
@honzajavorek@mastodonczech.cz 2026-09-27 06:48
@firstyear@infosec.exchange @amethyst@toots.n7.gg Yes. In Apiary we had a similar thing in place. Username had to be asked first to detect SSO accounts by domain, but we made it so that 1Password login was still seamless.