Monday, January 19, 2009

Why Websites Should Accept Multiple Third Party Identity Account Logins

There's been some discussion lately about the "competition" between Facebook Connect and OpenID-based third party authentication. From our experience, its in the best interest of most websites to accept multiple third party authentication solutions, since users may prefer to use a wide variety of accounts to facilitate registration and login. Why would you want to tie the success of your website to only one third party identity provider and risk missing some prospective user registrations or not let your users login with their preferred provider?

With JanRain's RPX solution, you can quickly and easily accept registration and login from all the major third party identity services. Additionally, you can accept all the rich user profile data being provided by OpenID Simple Registration (SREG), Attribute Exchange (AX), and provider specific APIs including MySpaceID and Facebook Connect. Read what John McCrea of Plaxo has to say about RPX.

The following are examples from three different websites that validate this perspective.

UserVoice

UserVoice is the online suggestion box that sorts itself. With customers including Sun, Random House, Nokia, Sony BMG, and MySpace, UserVoice is helping its clients get direct customer input on product priorities and build brand loyalty. As you can see, Google happens to be the preferred identity provider for UserVoice's customers, but if they chose to only accept Google, they'd be missing 50% of the users who prefer to use another account.

Interscope Records

Interscope Geffen A&M is a major force in global music, developing chart-topping artists across a wide range of musical genres including rock, rap, pop and alternative. Interscope Geffen A&M Records is a division of Universal Music Group, the world’s leading music company. While Facebook is currently the most preferred identity provider, 57% of Interscope's users prefer to use other identity providers.

Sulit.com.ph

Sulit is an online retailer for both buyers and sellers in the Philippines, like eBay. They wanted a quick and easy way to accept third party registration and login on their website. As you can see, Yahoo is the identity provider of choice, yet another 36% preferred using other providers.


AFI Begin Transmission

The Band AFI recently invited its fans to submit auditions via YouTube to perform on the their next album. They needed a quick and easy way to allow all their fans to comment on the submissions and vote for their favorites. As you can see, MySpace was the identity provider of choice, yet another 64% preferred using other providers.


acroBabble
acroBabble is an online collaborative word game that started in the mid 90's with an Internet Relay Chat (IRC) game run by a bot called "Acrobot." Since then its had many incarnations and now is run as a dedicated game site. As you can see, AOL, Yahoo, and Google all have over 20% share, but there's still another 23% from other providers.

So as you can see, if you want to reach the broadest audience and serve your customers according to their preferences, offering a wide range of third party authentication options may be the best way to go.

18 comments:

John McCrea said...

Great data, analysis, and post!

Luke Shepard said...

This data is really cool, thanks for posting Brian.

Praveen said...

reality is that most of the users from the 2 big Identity Providers (MySpace and Facebook) from your data are really from the other Identity/Email Providers like Yahoo, AOL, Hotmail and Google. So imagine the future when Facebook and MySpace lets their users login using their OpenIDs from their real identity providers enabling a true SSO & delegation across the web.

kyle said...

Reposting from here:

“As you can see, Google happens to be the preferred identity provider for UserVoice’s customers, but if they chose to only accept Google, they’d be missing 50% of the users who prefer to use another account.”

This conclusion is unwarranted.

It assumes that users familiar enough with multi-authentication services such as RPX to be comfortable authenticating via external sites have only a Google account, Facebook profile, OpenID, etc. Further (and more importantly), your statement implies that these users would abandon a site’s registration-required sections entirely should they not choose to support their preferred authentication platform of the hour. I would be extremely surprised if you could prove that 50% users would ignore applications such as UserVoice entirely without this option.

I’ll be up front and say that I’ve not conducted extensive user surveys of authentication preferences, but it’s likely that many users have accounts with a variety of services but frankly are comfortable authenticating with the site-specific credentials they’ve been using for the past 15 years.

In an age of phishing attacks which provoke the fear of committing social suicide by providing access to one’s social data to outside sources (which often results in profile defacement and mass-emails and/or text messages sent in the person’s name), I’d certainly prefer to authenticate using a site’s native user account system rather than funneling account data through multiple systems over which I’ve no control as a user. The Facebook third-party login indicates that proceeding means that “allowing uservoice.com access will let it pull your profile information, photos, your friends’ info, and other content that it requires to work” - far more than simple authentication. Opening up the social graph should not mean that user data can/should be spilled everywhere without recourse.

At best, I’d suggest that the conclusions reached in this post are at best unwarranted. At worst, I’d suggest that encouraging users to enable multiple distributed web sites access to personal information and profile data through outside APIs is completely unnecessary and borders on fostering dangerous anti-patterns.

Ecommercewebdesign said...

Some great information to be absorbed in this post. Thanks for sharing such a great post with us. Keep blogging.

dedicated server said...

Excellent idea! I hadn't thought of blog comments being syndicated. Seems it's true, the more you write, the more KNOWN you become. Keep blogging.

vps hosting said...

Pretty cool post. I just stumbled upon your blog and wanted to say that I have really liked reading your blog posts. Anyway I’ll be subscribing to your blog and I hope you post again soon!

Dedicated web hosting said...

Hello Brian. Some great information to be absorbed from this post. Its a great informative post for the newbies like me. Thanks for sharing such a great post with us. Keep blogging.

Ecommerce77 said...

Great post. I like your writing style very much. I found some useful information from this post. Keep blogging.

iMergent09 said...

Excellent post. I got much more information from this post. Thanks for sharing such an informative post with us. Keep blogging.

Imergent11 said...

Excellent post where useful information given. I found some useful and interesting information from this post. Keep blogging.

ecommerce.0 said...

Excellent post. I got a lot of useful information from this post. Thanks a bunch for sharing such a cool post with us. Keep blogging.

storesonline00 said...

Hi, this is one of the best site for the readers and the tips are really very innovative one,Thank you.

storesonline550 said...

Great post with useful information. And great analysis also. Thanks for sharing. Keep blogging.

Home Security Systems said...

I recently came across your blog and have been reading along. I don't know what to say except that I have enjoyed reading. Nice blog.I will keep visiting this blog very often.

Jack said...

good job done guys... very nice blog.... very interesting and knowledgeble... hope you will post newer content in coming days..
IIT JAM

bandwidth85 said...

It's a good book.I like the books very much.thanks a lot.Great post.It's really a nice post.

linkbuildingservices34 said...

Useful information shared..Iam very happy to read this article..thanks for giving us nice info.Fantastic walk-through. I appreciate this post.
car audio



TEMPLATE ERROR: Invalid data reference post.url: com.google.layouts.framework.widgetview.GoogleMarkupException: No dictionary named: 'post' in: ['blog']