<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <div class="moz-cite-prefix">Thai,<br>
      <br>
      We could also add an option in the Horizon's settings that
      automatically chooses one authentication workflow. At CERN we are
      trying to use websso with use of the SAML2 protocols as much as we
      can. That's said we automatically make users to use websso when
      they want to access their accounts via the dashboard. <br>
      <br>
      Hint: This is being done by automatic redirect to predefined
      Keystone endpoint once user hits our dashboard's URL).<br>
      <br>
      Marek<br>
      <br>
      <br>
      On 05.02.2015 20:15, Thai Q Tran wrote:<br>
    </div>
    <blockquote
cite="mid:OFFEB4AEF9.AAD8FBF1-ON87257DE3.0069C943-87257DE3.0069C949@us.ibm.com"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html;
        charset=windows-1252">
      <font face="Default Sans Serif,Verdana,Arial,Helvetica,sans-serif"
        size="2">Hi Ioram,<br>
        Thanks for the feedback. I agree that the names are hard to
        follow, they can change to something more intuitive. Or we can
        even provide a tooltip for more information.<br>
        As for the look and feel, I don't agree that its easier if all
        the options are listed. Image if you had 5 different ways for
        users to log in and they are all shown at once. That's a lot to
        take in.<br>
        This approach keep things simply, it's really not that hard to
        pick from a list.<br>
        <br>
        Hi Anton,<br>
        I'm just building on top of the visuals we already have without
        changing things too drastically. If you have a better idea, I
        would love to see it.<br>
        <br>
        <font color="#990099">-----Ioram Schechtman Sette
          <a class="moz-txt-link-rfc2396E" href="mailto:iss@cin.ufpe.br"><iss@cin.ufpe.br></a> wrote: -----</font>
        <div class="iNotesHistory" style="padding-left:5px;">
          <div
            style="padding-right:0px;padding-left:5px;border-left:solid
            black 2px;">To: "OpenStack Development Mailing List (not for
            usage questions)" <a class="moz-txt-link-rfc2396E" href="mailto:openstack-dev@lists.openstack.org"><openstack-dev@lists.openstack.org></a><br>
            From: Ioram Schechtman Sette <a class="moz-txt-link-rfc2396E" href="mailto:iss@cin.ufpe.br"><iss@cin.ufpe.br></a><br>
            Date: 02/05/2015 03:15AM<br>
            Subject: Re: [openstack-dev] [horizon][keystone]<br>
            <br>
            <div dir="ltr">
              <div>
                <div>
                  <div>
                    <div>
                      <div>
                        <div>
                          <div>
                            <div>Hi Thai,<br>
                              <br>
                              I agree with Anton that the names are not
                              intuitive for users.<br>
                              <br>
                            </div>
                            I would use something like:<br>
                          </div>
                          - Local authentication (for local credentials)<br>
                        </div>
                        - ?? (I also have no idea of what is a Default
                        protocol)<br>
                      </div>
                      - Authenticate using <name of IdPs or
                      federation> (something which is easy to the
                      user understand that he could use or not - this is
                      for the discovery service or remote IdP)<br>
                      <br>
                    </div>
                    Here in the University of Kent we used another
                    approach.<br>
                  </div>
                  Instead of selecting the method using a "list/combo"
                  box, we present all the options in a single screen.<br>
                </div>
                I think it's not beautiful, but functional.<br>
              </div>
              I think it would be easier to the user if they could have
              all the options in a single interface, since it doesn't
              become too much loaded (visually polluted).<br>
              <br>
              <img alt="Imagem inline 1"
                src="cid:part1.09080507.04040308@cern.ch" height="563"
                width="316"><br>
              <div>
                <div>
                  <div>
                    <div>Regards,<br>
                      Ioram<br>
                    </div>
                    <div><br>
                      <div>
                        <div>
                          <div>
                            <div>
                              <div>
                                <div>
                                  <div>
                                    <div class="gmail_extra"><br>
                                      <div class="gmail_quote">2015-02-05
                                        9:20 GMT+00:00 Anton Zemlyanov <span
                                          dir="ltr"><<a
                                            moz-do-not-send="true"
                                            href="mailto:azemlyanov@mirantis.com"
                                            target="_blank">azemlyanov@mirantis.com</a>></span>:<br>
                                        <blockquote class="gmail_quote"
                                          style="margin:0px 0px 0px
                                          0.8ex;border-left:1px solid
                                          rgb(204,204,204);padding-left:1ex">
                                          <div dir="ltr">Hi,
                                            <div><br>
                                            </div>
                                            <div>I guess "Credentials"
                                              is login and password. I
                                              have no idea what is
                                              "Default Protocol" or
                                              "Discovery Service".</div>
                                            <div>The proposed UI is
                                              rather embarrassing.</div>
                                            <div><br>
                                            </div>
                                            <div>Anton</div>
                                          </div>
                                          <div class="gmail_extra"><br>
                                            <div class="gmail_quote">
                                              <div>
                                                <div class="h5">On Thu,
                                                  Feb 5, 2015 at 12:54
                                                  AM, Thai Q Tran <span
                                                    dir="ltr"><<a
                                                      moz-do-not-send="true"
href="mailto:tqtran@us.ibm.com" target="_blank">tqtran@us.ibm.com</a>></span>
                                                  wrote:<br>
                                                </div>
                                              </div>
                                              <blockquote
                                                class="gmail_quote"
                                                style="margin:0px 0px
                                                0px
                                                0.8ex;border-left:1px
                                                solid
                                                rgb(204,204,204);padding-left:1ex">
                                                <div>
                                                  <div class="h5"><font
                                                      face="Default Sans
Serif,Verdana,Arial,Helvetica,sans-serif">Hi all,<br>
                                                      <br>
                                                      I have been
                                                      helping with the
                                                      websso effort and
                                                      wanted to get some
                                                      feedback.<br>
                                                      Basically, users
                                                      are presented with
                                                      a login screen
                                                      where they can
                                                      select:
                                                      credentials,
                                                      default protocol,
                                                      or discovery
                                                      service.<br>
                                                      If user selects
                                                      credentials, it
                                                      works exactly the
                                                      same way it works
                                                      today.<br>
                                                      If user selects
                                                      default protocol
                                                      or discovery
                                                      service, they can
                                                      choose to be
                                                      redirected to
                                                      those pages.<br>
                                                      <br>
                                                      Keep in mind that
                                                      this is a
                                                      prototype, early
                                                      feedback will be
                                                      good.<br>
                                                      Here are the
                                                      relevant patches:<br>
                                                      <a
                                                        moz-do-not-send="true"
href="https://review.openstack.org/#/c/136177/" target="_blank">https://review.openstack.org/#/c/136177/</a><br>
                                                      <a
                                                        moz-do-not-send="true"
href="https://review.openstack.org/#/c/136178/" target="_blank">https://review.openstack.org/#/c/136178/</a><br>
                                                      <a
                                                        moz-do-not-send="true"
href="https://review.openstack.org/#/c/151842/" target="_blank">https://review.openstack.org/#/c/151842/</a><br>
                                                      <br>
                                                      I have attached
                                                      the files and
                                                      present them
                                                      below:<br>
                                                      <br>
                                                      <img
                                                        src="cid:part7.09040900.08060306@cern.ch"
                                                        alt=""><img
                                                        src="cid:part8.08020409.01070406@cern.ch"
                                                        alt=""><img
                                                        src="cid:part9.02070208.00040103@cern.ch"
                                                        alt=""><img
                                                        src="cid:part10.01040802.04030200@cern.ch"
                                                        alt=""><br>
                                                      <br>
                                                      <br>
                                                    </font><br>
                                                  </div>
                                                </div>
__________________________________________________________________________<br>
                                                OpenStack Development
                                                Mailing List (not for
                                                usage questions)<br>
                                                Unsubscribe: <a
                                                  moz-do-not-send="true"
href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe"
                                                  target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
                                                <a
                                                  moz-do-not-send="true"
href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev"
                                                  target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
                                                <br>
                                              </blockquote>
                                            </div>
                                            <br>
                                          </div>
                                          <br>
__________________________________________________________________________<br>
                                          OpenStack Development Mailing
                                          List (not for usage questions)<br>
                                          Unsubscribe: <a
                                            moz-do-not-send="true"
href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe"
                                            target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
                                          <a moz-do-not-send="true"
                                            href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev"
                                            target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
                                          <br>
                                        </blockquote>
                                      </div>
                                      <br>
                                    </div>
                                  </div>
                                </div>
                              </div>
                            </div>
                          </div>
                        </div>
                      </div>
                    </div>
                  </div>
                </div>
              </div>
            </div>
            <div><font face="Courier New,Courier,monospace" size="2">__________________________________________________________________________<br>
                OpenStack Development Mailing List (not for usage
                questions)<br>
                Unsubscribe:
                <a class="moz-txt-link-abbreviated" href="mailto:OpenStack-dev-request@lists.openstack.org?subject:unsubscribe">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
                <a moz-do-not-send="true"
                  href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
              </font></div>
          </div>
        </div>
      </font>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: <a class="moz-txt-link-abbreviated" href="mailto:OpenStack-dev-request@lists.openstack.org?subject:unsubscribe">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a>
<a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a>
</pre>
    </blockquote>
    <br>
    <br>
    <pre class="moz-signature" cols="72">-- 
Marek Denis
[<a class="moz-txt-link-abbreviated" href="mailto:marek.denis@cern.ch">marek.denis@cern.ch</a>]</pre>
  </body>
</html>