Support for SSO on forum.snapcraft.io

zyga 2017-03-30 10:29:25 UTC #1

Many people are asking about SSO support. Can we consider adding support for Google / Twitter / Facebook / Github / etc authentication to our forum?

sergiusens 2017-03-30 15:37:31 UTC #2

This should be rather easy with the exception of the launchpad integration but it has been done already on https://discourse.ubuntu.com (which is now defunct).

niemeyer 2017-03-30 16:39:51 UTC #3

I’ve been holding back these integrations just for now so we can get our feet wet and ensure things are working well around here without buying into more complexity. SAML for example is an external plugin, and those plugins often break when we update the main base.

Something along those lines is probably coming soon, though, perhaps starting with GitHub.

Wimpress 2017-03-30 18:24:18 UTC #4

I’ve configured several logon integrations for my Discourse site, the most popular a easy to get going:

You might want to dodge Facebook, it has been scientifically proven that people are deeply suspicious of Facebook Connect. And for when you want to tackle SSO:

Official Single-Sign-On for Discourse

niemeyer 2017-03-30 18:27:33 UTC #5

Yeah, those at the top are the built-in ones, and are easy to get working. Let’s just wait a moment until we’re settled.

elopio 2017-03-31 15:04:49 UTC #6

I think SSO should be a top priority, because we want most of the people in this forum to be publishers of snaps in the store. For that they need an Ubuntu SSO account, and now we are forcing them to create even one more account to use our platform.

niemeyer 2017-03-31 15:49:10 UTC #7

I know it’s hard to believe that the day has a limited number of hours, but turns out it does.

ogra 2017-03-31 15:52:56 UTC #8

there is a workaround by working from a constantly moving plane that flies the right way around the world …

zyga 2017-04-19 11:44:46 UTC #9

Hey. What is the status of enabling any additional type of SSO?

niemeyer 2017-04-23 15:04:44 UTC #10

I’ve forked a pre-existing plugin and made it appropriate for our use case. So we’re now ready to enable GitHub, Twitter, Google, and Ubuntu, with little more than flag switch.

That said, my plan is to wait at least two more weeks from today, because at the end of this last week we finished integrating into the forum the snapcraft and devices mailing lists, so I’d like to give these users some time to get comfortable before changing things further.