Ubuntu SSO for Phab
Open, NormalPublic

Description

Come on, it only makes sense, if we're going to have SSO at all.

wxl created this task.Tue, Nov 28, 2:26 PM
wxl created this object in space S1 Public.
wxl moved this task from New to Blocked on the Meta board.Tue, Nov 28, 2:44 PM

Supposedly the contact for Ubuntu One (login.ubuntu.com) is isd-support@canonical.com. Just dropped them an email.

wxl moved this task from Blocked to in progress on the Meta board.Tue, Nov 28, 3:07 PM
wxl added a comment.Tue, Nov 28, 3:09 PM

Here's the response:

Ubuntu SSO is an openid identity provider (see for example askubuntu.com where you can use Launchpad as your identity). If Phabricator supports openid, you could use that to integrate easily.

It unfortunately doesn't support LDAP, and only supports OAuth 1.

Feel free to bzr branch lp:canonical-identity-provider and check out docs/resources/token.txt for info on how to get oauth tokens. This is, for example, the authentication mechanism old versions of Ubuntu Software Center used. Be warned that oauth support might go away in the future though.

You can also file a bug at https://bugs.launchpad.net/canonical-identity-provider/ to get it to the wider attention of SSO developers, because this address is mainly for login issues and as such, the visibility and help I can provide are limited.

I'll look more into this.

wxl added a comment.Tue, Nov 28, 4:32 PM

Here's the Discourse plugin and it is indeed using OpenID.

wxl added a comment.Tue, Dec 5, 10:39 AM

Unfortunately it looks like the request for OpenID auth was denied but I'll see if I can find some more information as that's a little old.

wxl added a comment.Tue, Dec 5, 11:05 AM

Dropped a message on the Phabricator community support forum (which, in an example of poor dogfooding, is not Phabricator but Discourse). Hopefully someone will have some sort of solution.

tsimonq2 moved this task from in progress to Blocked on the Meta board.Fri, Dec 8, 8:33 AM
tsimonq2 raised the priority of this task from Wishlist to Normal.
tsimonq2 added subscribers: Meta, tsimonq2.

It is open source after all... You might be able to write a plugin for our instance and make it a Git submodule that you put on GitHub somewhere...

Would you be open to writing that code?