[keycloak-dev] Usability: Improve screen for setup TOTP

[Stian Thorgersen]

On Thu, 21 Nov 2019 at 12:07, Marek Posolda <mposolda at redhat.com> wrote:

> I want to ask some feedback about the screen for the "Setup TOTP" . I've
> created JIRA https://issues.jboss.org/browse/KEYCLOAK-12168 , which
> contains some screenshot of how currently the screen for the required
> action for "Setup OTP" looks like. In other words, this is displayed to
> the user at the end of the authentication when he has "Setup TOTP"
> required action on him.
>
> Few questions:
>
>   * Is the "Device name" appropriate label? Would something like
>     "Authenticator App Label" be better?
>

I'm not too keen on either. Maybe "Phone name"?


>
>   * Should it be more emphasized that "Authenticator App Label" is not
>     mandatory? IMO it is currently not very clear. Also there is nothing
>     in the help-text about this input field. Maybe we can add another
>     sentence to point 3 like "Optionally provide Authenticator App Label
>     as a reference." I am not very happy with that sentence. Any better
>     ideas?
>

What about only asking for a label if there is already one registered? Most
users will only use one and it seems unnecessary to ask them to add a label.


>
>   * Alternatively we can use separate screen for providing the
>     "Authenticator App Label" . In other words, there will be just
>     single input for OTP code and than once user clicks "Submit" and OTP
>     code is successfully verified, there will be another screen where he
>     can provide "Authenticator App Label" . It seems Google is using
>     separate screen for providing labels when user register Security Key.
>

I prefer single screen, but see above.


>
>   * Any better ideas?
>
>   * We can possibly improve the old account console in similar manner.
>     Currently it looks like in screenshot setup-otp-account-mgmt.png .
>     Maybe we can at least change the label for "Device name" and also
>     add another sentence to the help text?
>

Old account console can just stay as is. We should focus improvements on
new console.


>
> Thanks,
>
> Marek
>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
>