UX: Custom Sign-in Page Message for Blocked Users MVC
Problem to solve
Blocked GitLab users are simply redirected back to GitLab's login page with a message about the status of their account, with no further instruction or guidance (for example, whom to contact to remediate the situation).
Intended users
Personas are described at https://about.gitlab.com/handbook/marketing/product-marketing/roles-personas/ -->
MVC
We should provide admins with the ability to create a custom message which replaces the generic: "Your account has been blocked, Please contact your gitlab administrator if you think that this is an error."
Design Criteria
-
Design for the message on login page -
Design for admin setting
Future Iteration Opportunity
To provide guidance to blocked users on what steps to undertake to recover their account, a customer proposed an interesting feature. In the customer's words:
...we were thinking that this could be a URL that is defined in the gitlab.rb file where a user would be directed to that URL when they have authenticated successfully but where their account is in a blocked state. If this setting exists in the rb file then GitLab would redirect the user to it and if it does not exist then GitLab would function as it normally does which is to dump the user back onto the login page with a message about being blocked.
By redirecting to another URL we could do various things like simply have a web page that displays additional info about what the user should do to get unblocked or we could even build an automated process that will use our SSO to auth the user again and then in the background unblock them using an API call and then redirect the user back to GitLab.
Proposal
As above, provide self-managed administrators with the option to specify a redirect URL in their Gitlab configuration where they could host a page with instructions on next steps for blocked users.