Thai,
We could also add an option in the Horizon's settings that automatically
chooses one authentication workflow. At CERN we are trying to use websso
with use of the SAML2 protocols as much as we can. That's said we
automatically make users to use websso when they want to access their
accounts via the dashboard.
Hint: This is being done by automatic redirect to predefined Keystone
endpoint once user hits our dashboard's URL).
Marek
On 05.02.2015 20:15, Thai Q Tran wrote:
Hi Ioram,
Thanks for the feedback. I agree that the names are hard to follow,
they can change to something more intuitive. Or we can even provide a
tooltip for more information.
As for the look and feel, I don't agree that its easier if all the
options are listed. Image if you had 5 different ways for users to log
in and they are all shown at once. That's a lot to take in.
This approach keep things simply, it's really not that hard to pick
from a list.
Hi Anton,
I'm just building on top of the visuals we already have without
changing things too drastically. If you have a better idea, I would
love to see it.
-----Ioram Schechtman Sette <i...@cin.ufpe.br> wrote: -----
To: "OpenStack Development Mailing List (not for usage questions)"
<openstack-dev@lists.openstack.org>
From: Ioram Schechtman Sette <i...@cin.ufpe.br>
Date: 02/05/2015 03:15AM
Subject: Re: [openstack-dev] [horizon][keystone]
Hi Thai,
I agree with Anton that the names are not intuitive for users.
I would use something like:
- Local authentication (for local credentials)
- ?? (I also have no idea of what is a Default protocol)
- Authenticate using <name of IdPs or federation> (something which is
easy to the user understand that he could use or not - this is for the
discovery service or remote IdP)
Here in the University of Kent we used another approach.
Instead of selecting the method using a "list/combo" box, we present
all the options in a single screen.
I think it's not beautiful, but functional.
I think it would be easier to the user if they could have all the
options in a single interface, since it doesn't become too much loaded
(visually polluted).
Imagem inline 1
Regards,
Ioram
2015-02-05 9:20 GMT+00:00 Anton Zemlyanov <azemlya...@mirantis.com
<mailto:azemlya...@mirantis.com>>:
Hi,
I guess "Credentials" is login and password. I have no idea what
is "Default Protocol" or "Discovery Service".
The proposed UI is rather embarrassing.
Anton
On Thu, Feb 5, 2015 at 12:54 AM, Thai Q Tran <tqt...@us.ibm.com
<mailto:tqt...@us.ibm.com>> wrote:
Hi all,
I have been helping with the websso effort and wanted to get
some feedback.
Basically, users are presented with a login screen where they
can select: credentials, default protocol, or discovery service.
If user selects credentials, it works exactly the same way it
works today.
If user selects default protocol or discovery service, they
can choose to be redirected to those pages.
Keep in mind that this is a prototype, early feedback will be
good.
Here are the relevant patches:
https://review.openstack.org/#/c/136177/
https://review.openstack.org/#/c/136178/
https://review.openstack.org/#/c/151842/
I have attached the files and present them below:
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
<http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
<http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
--
Marek Denis
[marek.de...@cern.ch]
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
