{"id":591,"date":"2016-02-07T22:59:53","date_gmt":"2016-02-07T22:59:53","guid":{"rendered":"http:\/\/storycase.co.uk\/?p=591"},"modified":"2016-02-11T16:08:32","modified_gmt":"2016-02-11T16:08:32","slug":"user-need-driven-stories","status":"publish","type":"post","link":"https:\/\/storycase.co.uk\/staging\/user-need-driven-stories\/591\/","title":{"rendered":"User need driven stories"},"content":{"rendered":"

In the UK the Government has sought to improve digital service design<\/a> by focusing on users and their needs rather than more traditional requirements driven approaches. User research is at the heart of a project’s discovery or inception phase and follows through subsequent alpha and beta phases. The user researcher is a clear an distinct agile team role responsible for coordinating and planning\u00a0multivariate experiments and presenting findings to feed into user interaction design and stories.<\/p>\n

Agile user stories that adopt the common template<\/a> of<\/p>\n

As a <user role>\r\nI want <user goal>\r\nSo that <user reason \/ benefit><\/pre>\n
help capture user needs by stating the user’s goal and reason of each story. It seems easy to equate user need to user goal and satisfy user researcher’s suggestions.<\/p>\n
There are a few traps that may trip you up though. Let’s consider a simple login\u00a0service as many sites have them. If you are not using OAuth and need to enter a site username and password for authentication then you likely have a typical user story:<\/p>\n
As a registered user\r\nI want to enter my credentials\r\nSo that I can login to the service\r\n\r\n<\/pre>\n
User research adds some acceptance criteria:<\/p>\n
SCENARIO User enters an incorrect password and attempts to login\r\nGIVEN user\u00a0has entered an incorrect password\r\nAND user has entered a valid username\r\nWHEN user requests login\r\nTHEN user is told their password is incorrect<\/pre>\n
And the site’s security users\u00a0demand:<\/p>\n
GIVEN user\u00a0has entered a incorrect password\r\nAND user has entered a valid username\r\nWHEN user requests login\r\nTHEN user is told their username or password is incorrect<\/pre>\n
It’s just a small difference but to a true user who may use the service\u00a0infrequently or is logging in from a different device that does not remember credentials it’s a frustrating experience. Which is incorrect – username or password? The service must obey the security needs the penetration testers say or they won’t pass the system acceptance test. A hacker may be trying to find valid usernames and if they are told the truth about credentials they can harvest them easily.<\/p>\n
So what’s missing here is a better way to capture the user needs and design a less frustrating user experience. Let’s start with the user stories:<\/p>\n
As a registered user\r\nI want to know when my credentials are incorrect\r\nSo that I can login to the service easily<\/pre>\n
Also we’ll include other users:<\/p>\n
As security officer\r\nI want to hide knowledge of incorrect usernames or passwords\r\nSo that hackers can't guess credentials easily<\/pre>\n
Or if you prefer one technique is to recognise and represent malicious users with stories as threats and design specific behaviour to counteract:<\/p>\n
As a hacker\r\nI want to discover valid usernames\r\nSo that I can use a registered user's account to gain access to the service<\/pre>\n
So now we can see there are three types of user with conflicting user needs. Unfortunately for the real user many\u00a0web sites prioritise security user needs and don’t recognise or deal with the conflict. Cyber security is trump card.<\/p>\n
Is there a better way? Let’s have another look at the login story to see where the problems lie.<\/p>\n
As a registered user\r\nI want to know when my credentials are incorrect\r\nSo that I can login to the service easily<\/pre>\n
From the real user’s perspective they have registered at some point and set up an account. They may or may not have entered the correct username \/ email address but they think the service should tell them if it’s wrong. Users may not realise that without a correct user name the service can’t validate the password although it’s obvious to the analyst and developers. User research can pick up on these aspects and lead to a better user story:<\/p>\n
As a registered user\r\nI want the service to help me when my credentials are incorrect\r\nSo that I can recover my username or password if I forget them<\/pre>\n
Here the user journey changes to scenarios\u00a0that can help real users discover what they have done wrong. Instead of “You have entered an incorrect username or password” the service offers ways to retrieve forgotten username or password and by so doing establishes the persona rather than assuming any. Obviously this needs more effort and care to keep the security officer happy that no vulnerability is being introduced.<\/p>\n
 <\/p>\n","protected":false},"excerpt":{"rendered":"
In the UK the Government has sought to improve digital service design by focusing on users and their needs rather than more traditional requirements driven approaches. User research is at the heart of a project’s discovery or inception phase and follows through subsequent alpha and beta phases. The user researcher is a clear an distinct […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-591","post","type-post","status-publish","format-standard","hentry","category-agile-thoughts"],"yoast_head":"\nUser need driven stories — storycase<\/title>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"User need driven stories — storycase\" \/>\n<meta property=\"og:description\" content=\"In the UK the Government has sought to improve digital service design by focusing on users and their needs rather than more traditional requirements driven approaches. User research is at the heart of a project’s discovery or inception phase and follows through subsequent alpha and beta phases. The user researcher is a clear an distinct […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/storycase.co.uk\/staging\/user-need-driven-stories\/591\/\" \/>\n<meta property=\"og:site_name\" content=\"storycase\" \/>\n<meta property=\"article:published_time\" content=\"2016-02-07T22:59:53+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2016-02-11T16:08:32+00:00\" \/>\n<meta name=\"author\" content=\"R\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"R\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/user-need-driven-stories\\\/591\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/user-need-driven-stories\\\/591\\\/\"},\"author\":{\"name\":\"R\",\"@id\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/#\\\/schema\\\/person\\\/dd9695b0f527dd260b5aafdf5e06616f\"},\"headline\":\"User need driven stories\",\"datePublished\":\"2016-02-07T22:59:53+00:00\",\"dateModified\":\"2016-02-11T16:08:32+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/user-need-driven-stories\\\/591\\\/\"},\"wordCount\":536,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/#organization\"},\"articleSection\":[\"Agile Thoughts\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/user-need-driven-stories\\\/591\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/user-need-driven-stories\\\/591\\\/\",\"url\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/user-need-driven-stories\\\/591\\\/\",\"name\":\"User need driven stories — storycase\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/#website\"},\"datePublished\":\"2016-02-07T22:59:53+00:00\",\"dateModified\":\"2016-02-11T16:08:32+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/user-need-driven-stories\\\/591\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/user-need-driven-stories\\\/591\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/user-need-driven-stories\\\/591\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"User need driven stories\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/#website\",\"url\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/\",\"name\":\"StoryCase\",\"description\":\"Agile Business Solutions\",\"publisher\":{\"@id\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/#organization\",\"name\":\"Storycase Ltd\",\"url\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/wp-content\\\/uploads\\\/2015\\\/11\\\/SC-Logo.png\",\"contentUrl\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/wp-content\\\/uploads\\\/2015\\\/11\\\/SC-Logo.png\",\"width\":742,\"height\":170,\"caption\":\"Storycase Ltd\"},\"image\":{\"@id\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/storycase-limited\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/#\\\/schema\\\/person\\\/dd9695b0f527dd260b5aafdf5e06616f\",\"name\":\"R\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d189e81d3bc8014fe6353ddb35b152597a1251a162260a4870623477d42b2a7b?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d189e81d3bc8014fe6353ddb35b152597a1251a162260a4870623477d42b2a7b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d189e81d3bc8014fe6353ddb35b152597a1251a162260a4870623477d42b2a7b?s=96&d=mm&r=g\",\"caption\":\"R\"},\"url\":\"https:\\\/\\\/storycase.co.uk\\\/staging\\\/author\\\/superick\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"User need driven stories — storycase","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_GB","og_type":"article","og_title":"User need driven stories — storycase","og_description":"In the UK the Government has sought to improve digital service design by focusing on users and their needs rather than more traditional requirements driven approaches. User research is at the heart of a project’s discovery or inception phase and follows through subsequent alpha and beta phases. The user researcher is a clear an distinct […]","og_url":"https:\/\/storycase.co.uk\/staging\/user-need-driven-stories\/591\/","og_site_name":"storycase","article_published_time":"2016-02-07T22:59:53+00:00","article_modified_time":"2016-02-11T16:08:32+00:00","author":"R","twitter_card":"summary_large_image","twitter_misc":{"Written by":"R","Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/storycase.co.uk\/staging\/user-need-driven-stories\/591\/#article","isPartOf":{"@id":"https:\/\/storycase.co.uk\/staging\/user-need-driven-stories\/591\/"},"author":{"name":"R","@id":"https:\/\/storycase.co.uk\/staging\/#\/schema\/person\/dd9695b0f527dd260b5aafdf5e06616f"},"headline":"User need driven stories","datePublished":"2016-02-07T22:59:53+00:00","dateModified":"2016-02-11T16:08:32+00:00","mainEntityOfPage":{"@id":"https:\/\/storycase.co.uk\/staging\/user-need-driven-stories\/591\/"},"wordCount":536,"commentCount":0,"publisher":{"@id":"https:\/\/storycase.co.uk\/staging\/#organization"},"articleSection":["Agile Thoughts"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/storycase.co.uk\/staging\/user-need-driven-stories\/591\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/storycase.co.uk\/staging\/user-need-driven-stories\/591\/","url":"https:\/\/storycase.co.uk\/staging\/user-need-driven-stories\/591\/","name":"User need driven stories — storycase","isPartOf":{"@id":"https:\/\/storycase.co.uk\/staging\/#website"},"datePublished":"2016-02-07T22:59:53+00:00","dateModified":"2016-02-11T16:08:32+00:00","breadcrumb":{"@id":"https:\/\/storycase.co.uk\/staging\/user-need-driven-stories\/591\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/storycase.co.uk\/staging\/user-need-driven-stories\/591\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/storycase.co.uk\/staging\/user-need-driven-stories\/591\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/storycase.co.uk\/staging\/"},{"@type":"ListItem","position":2,"name":"User need driven stories"}]},{"@type":"WebSite","@id":"https:\/\/storycase.co.uk\/staging\/#website","url":"https:\/\/storycase.co.uk\/staging\/","name":"StoryCase","description":"Agile Business Solutions","publisher":{"@id":"https:\/\/storycase.co.uk\/staging\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/storycase.co.uk\/staging\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/storycase.co.uk\/staging\/#organization","name":"Storycase Ltd","url":"https:\/\/storycase.co.uk\/staging\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/storycase.co.uk\/staging\/#\/schema\/logo\/image\/","url":"https:\/\/storycase.co.uk\/staging\/wp-content\/uploads\/2015\/11\/SC-Logo.png","contentUrl":"https:\/\/storycase.co.uk\/staging\/wp-content\/uploads\/2015\/11\/SC-Logo.png","width":742,"height":170,"caption":"Storycase Ltd"},"image":{"@id":"https:\/\/storycase.co.uk\/staging\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/storycase-limited"]},{"@type":"Person","@id":"https:\/\/storycase.co.uk\/staging\/#\/schema\/person\/dd9695b0f527dd260b5aafdf5e06616f","name":"R","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/d189e81d3bc8014fe6353ddb35b152597a1251a162260a4870623477d42b2a7b?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d189e81d3bc8014fe6353ddb35b152597a1251a162260a4870623477d42b2a7b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d189e81d3bc8014fe6353ddb35b152597a1251a162260a4870623477d42b2a7b?s=96&d=mm&r=g","caption":"R"},"url":"https:\/\/storycase.co.uk\/staging\/author\/superick\/"}]}},"_links":{"self":[{"href":"https:\/\/storycase.co.uk\/staging\/wp-json\/wp\/v2\/posts\/591","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/storycase.co.uk\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/storycase.co.uk\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/storycase.co.uk\/staging\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/storycase.co.uk\/staging\/wp-json\/wp\/v2\/comments?post=591"}],"version-history":[{"count":11,"href":"https:\/\/storycase.co.uk\/staging\/wp-json\/wp\/v2\/posts\/591\/revisions"}],"predecessor-version":[{"id":613,"href":"https:\/\/storycase.co.uk\/staging\/wp-json\/wp\/v2\/posts\/591\/revisions\/613"}],"wp:attachment":[{"href":"https:\/\/storycase.co.uk\/staging\/wp-json\/wp\/v2\/media?parent=591"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/storycase.co.uk\/staging\/wp-json\/wp\/v2\/categories?post=591"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/storycase.co.uk\/staging\/wp-json\/wp\/v2\/tags?post=591"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}