Changes

Jump to: navigation, search

Identity/Firefox Accounts

944 bytes removed, 21:37, 21 March 2014
→‎FAQ
==Why does Firefox Accounts require me to choose a password?==
The first relying service we're targeting with Firefox Accounts is Firefox Sync. Current Firefox Sync encrypts all your data in our servers, and we will continue to do so in the Firefox Accounts backed version of Sync. However, in the FxA backed version of Firefox Sync, we will encrypt your Sync data with a key derived from your Firefox Account password, instead a random key managed by the J-PAKE pairing protocol. This technique of using a password derived sync key is similar to how data protection in [https://support.google.com/chrome/answer/1181035?hl=en&ref_topic=1693469 Chrome Sync] works.
 
==What is the UX for signing in to a Firefox Account?==
NOTE: This is a work in progress!
 
Here are some Lucidchart flow diagrams for FxA: https://www.lucidchart.com/documents/edit/4f34-ef24-52695ddf-8057-72580a00d543
===Web===
We anticipate the majority of Firefox Account sign ins and account creations will be driven by flows from Mozilla relying services, such as Firefox Marketplace. We propose relying Mozilla services present account controls and signal the FxA logged in state in the upper right corner of their Web properties:
 
[[File:Sign-in.png|400px]]
 
If a user clicks on the "Sign Up" or "Log In" button, it will take her to to a FxA page that will allow her to sign in or create an account. After completing sign in or account creation, she will be redirected back to the relying Mozilla service.
 
===FxOS===
TODO
==How do relying Mozilla services authenticate an FxA user?==
Great question. We're still working out the details. We're first going to figure out the [Two ways:* BrowserID assertions* Oauth2 (coming soon: https://wikigithub.com/mozilla.org/Identity/Firefox_Accounts/SSO product requirements of SSO with FxA] and go from there.fxa-oauth-server)
==How does a user reset her Firefox Account password?==
Persona is not intended to provide you with a new account, and it's not a new account system. Persona is a federated login protocol. You use Persona to log in to relying sites, and it's not intended that you need to "sign up" for Persona before you can use it. If you would need to sign up for anything, you would need to create an account at an IdP that supports Persona.
One *huge* confusing point about Persona today is a service called the "Persona Fallback", which serves as a proxy IdP if your actual IdP doesn't support Persona (or isn't bridged), which just about every IdP except for Google and Yahoo. In this case, you currently have to sign up for a "Persona Fallback Account" (i.e. choose a password and verify your email) to use Persona.
But a Persona Fallback Account is not a Persona Account, it's not the long term vision of Persona, and that's not supposed to be the happy path of the Persona login experience.
* Firefox Marketplace
* Where's My Fox?
* [https://wiki.mozilla.org/User:Dria/PiCL_Future_Ideas crazy future ideas]
== What do these terms mean? ==
Ckarlof
Confirm
282
edits
Retrieved from "https://wiki.mozilla.org/Special:MobileDiff/954997"

Navigation menu