Multi Step Login - Username + Password + PIN

grainer

Hi,
have an Issue login in on banking website.
On first page username is asked, next page there are two fields for password + PIN. Whereas all mentioned fields are static, meaning they do not change.
When all three fields are entered correctly, then i can request two-factor sms code.

I did not manage to get those three fields filled automatically. Have tried to create new login / inspect the website data looking for the id´s from the fields and put that in manually in "view saved form details".
This is the url i am speaking of -> https://www.banking.co.at/banking/login.xhtml?m=121&f=1
I have another bank where there is a similar problem.

Any help is much appreciated, pls. let me know if any information needed.

Kind Regards,
Gernot

---

1Password Version: 7.8
Extension Version: 7.8
OS Version: Mac OS 11.2.3 (20D91)
Sync Type: Cloud

ag_yaron

Hey @grainer ,

Since I don't have a real account on this website, it only asks me of a username and a password. There's no PIN field showing up.
Can you please get to the PIN field, right click it and select "Inspect" (best to do in Chrome or Firefox), then take a screenshot of the page and the HTML code that shows up and post it here? Make sure there's no personal information of yours showing in the screenshot (no username/email or password).

Keep us posted.

grainer

Hi ag_yaron,

have taken some screenshots which should be self-explaining. You can use the fuctional number as user name in the picture.

ag_yaron

Thanks for the screenshtos @grainer .
I removed some of them because they contained your user number.

So the issue here is that there are two password fields - the username and the PIN fields are both password fields, and 1Password must pick one to autofill a normal login item.

I was able to get both to autofill if I build my own login item without recording it on the page itself. Here's how you can try that:

1. Open your 1Password desktop app and click the PLUS icon at the top, then select "Login" from the list of options.
2. In the new login that shows up, give it a new unique name, then fill in your user number in the username field (this is the first field that you need to autofill before the password fields show up).
3. Leave the password field empty. Under the password field, paste the website's URL in the website field: https://www.banking.co.at/banking/login.xhtml
4. Under the website field, select an empty Label and call it loginform:username (case sensitive). Put in your username directly under that label, then click the dropdown selection on the far right of this field and change it from "Text" to "Password".
5. Repeat step 4 in a new empty Label and name this one loginform:password. Input your PIN code directly under it and change the field's type from "Text" to "Password".
6. Click on "Save" to save this new login item, then go to the website and try to autofill the page with the new login item, see if you are able to autofill all three fields that way.

Here's a screenshot of what the new login item should look like in your 1Password:

grainer

i have used a fake number of course. Have now exactly created a login item, the other ones I´ve trashed. Username on first page gets autofilled when i select "Go" in extension. On second Page there is no autofill anymore. Instead the 1P Icon appears upon click into first Pwd field, then in Dropdown have to choose the one login item. After that both fields get autofilled but with the wrong passwords. i.e. first field receives username from first page (short asterisks), second field i cannot tell if data from loginform:userName or loginform:passoword is used.
Have disabled extension, closed Safari, closed Main 1P App, open Safari, activate Extension again - no cure, but i fell we are half way through towards a solution.
I wonder now for why it is working in your environment ?

ag_yaron

Hey @grainer

You are right, the username field is autofilled with the client number from the first page, I didn't notice that and thought both password fields were autofilling correctly.
The confusion here is because the username field is also a password field and contains the word "username" in the field's name, so it throws 1Password off completely. The PIN field is autofilled correctly though.

I'll forward this to our developers so they can investigate and see if there's anything we can improve here on our side in the future.
For now, here's what I suggest:

1. Autofill your customer number on the first page.
2. On the 2nd page, click the 1Password extension icon in your browser's toolbar to show 1Password.
3. Grab the first password with your mouse and drag it over to the relevant field on the website, then drop it there.
4. Grab the 2nd password with your mouse from the 1Password window and drag it over to the relevant field on the website.

Using drag and drop you should be able to fill both of these fields correctly. While not as fast as autofilling, it will at least make things useable for now.
Sorry for the inconvenience here.

ref: dev/core/core#6645

grainer

Hi ag_yaron,
your advice would work well as a workaround. For now I have setup another workaround, i use a second login item for the same website.
Here is my setup

Step 1: first item is to autofill the username (client number) on first page
deleted password entry in saved webform details to give my just the client number

Step 2: second item is for autofill username + password - have to click in either passoword or username field and there on 1P Icon to select second login item.
saved webform details have both username + password enabled

That is good enought at the moment but hopefully devs. can do some magic on it :-)

Thanks for your efforts!

ag_yaron

Thanks for sharing your workaround @grainer , it does sound better :)