fediversity/fediversity

single sign-on (SSO) for services #212

New issue

Open

opened 2025-02-28 08:49:09 +01:00 by kiara · 0 comments

kiara commented

2025-02-28 08:49:09 +01:00

Owner

As a Fediversity user,
given I run multiple Fediversity applications,
I want my users to be able to log in across these services using a single account,
so that they may enjoy a streamlined authentication experience across my services.

implementation notes

selfhostblocks support (added in #1054)
- their OIDC SSO of authelia looks reasonable
provision SSO ~~like kanidm-provision~~ (does not integrate with LDAP)?
c.f. #337, which provides for central user management behind such SSO
c.f. contract support (#605, added in #1054)
SSO provider hosted

application OIDC support (c.f. apps-sheet):

mastodon: ✅
pixelfed: ✅ (source)
peertube: ✅
nextcloud: ✅ 1 2

**As** a Fediversity user, **given** I run multiple Fediversity applications, **I want** my users to be able to log in across these services using a single account, **so that** they may enjoy a streamlined authentication experience across my services. ### implementation notes - [x] selfhostblocks support (added in #1054) - their OIDC SSO of [`authelia`](https://github.com/authelia/authelia) looks reasonable - provision SSO ~~like [`kanidm-provision`](https://github.com/oddlama/kanidm-provision)~~ (does not integrate with LDAP)? - c.f. #337, which provides for central user management behind such SSO - [x] c.f. contract support (#605, added in #1054) - [ ] SSO provider hosted application OIDC support (c.f. [apps-sheet](https://git.fediversity.eu/fediversity/apps-sheet/src/branch/main/apps.ods)): - [x] mastodon: [✅](https://github.com/mastodon/mastodon/pull/16221) - [x] pixelfed: [✅](https://github.com/pixelfed/pixelfed/pull/5608) ([source](https://github.com/pixelfed/pixelfed/blob/dev/config/remote-auth.php#L4)) - [x] peertube: [✅](https://www.npmjs.com/package/peertube-plugin-auth-openid-connect) - [ ] nextcloud: ✅ [1](https://apps.nextcloud.com/apps/oidc_login) [2](https://apps.nextcloud.com/apps/user_oidc)

kiara referenced this issue

2025-03-31 09:10:15 +02:00

Wire up passing credentials from FediPanel to the Pixelfed configuration #190

kiara added a new dependency

2025-04-01 22:57:31 +02:00

#289 key features improving user experience supported

~~kiara referenced this issue 2025-04-08 17:27:16 +02:00~~

connecting an existing identity management service #161

kiara added the

type: user story

label

2025-05-01 12:02:14 +02:00

kiara changed title from ~~SSO for services~~ to single sign-on (SSO) for services

2025-05-21 12:13:36 +02:00

kiara added a new dependency

2025-05-21 12:21:39 +02:00

#337 operator can delegate user management

kiara added a new dependency

2025-06-01 10:41:12 +02:00

#228 [D2.3] brought into production [2027-11-01]

kiara referenced this issue

2025-06-09 21:10:43 +02:00

initial focus on single application for development #327

~~kiara referenced this issue 2025-06-09 23:00:55 +02:00~~

application offering delegated #369

kiara referenced this issue

2025-06-10 20:05:14 +02:00

key features improving user experience supported #289

~~kiara referenced this issue 2025-12-01 15:17:02 +01:00~~

application offering delegated #369

kiara referenced this issue

2025-12-02 17:01:45 +01:00

User management #613

kiara added a new dependency

2025-12-02 17:02:57 +01:00

#613 User management

kiara referenced this issue

2025-12-02 21:07:39 +01:00

sign-up for external developers #335

kiara added a new dependency

2025-12-02 22:48:31 +01:00

#161 connecting an existing identity management service

kiara added the

label

2025-12-02 23:59:12 +01:00

kiara referenced this issue

2025-12-03 00:56:17 +01:00

applications integrated with user management #615

kiara referenced this issue from fediversity/meta

2026-02-09 14:10:20 +01:00

split up architecture to better clarify internals #36

kiara referenced this issue

2026-02-16 15:07:10 +01:00

application offering delegated #369

kiara removed a dependency

2026-05-05 08:08:19 +02:00

#337 operator can delegate user management

kiara referenced this issue

2026-05-06 23:08:33 +02:00

add authelia as a stub operator ancilliary node, mirroring garage #910

kiara referenced this issue from a commit

2026-05-06 23:34:50 +02:00

add `authelia` as a stub operator ancilliary node, mirroring `garage` (#910)

kiara removed a dependency

2026-05-31 16:27:28 +02:00

#161 connecting an existing identity management service

kiara referenced this issue

2026-06-07 23:39:29 +02:00

add SSO contract #1054

kiara added a new dependency

2026-06-07 23:42:02 +02:00

#954 demo env broken

kiara added the

user-management

label

2026-06-12 00:43:13 +02:00

Sign in to join this conversation.

No labels

application-offering

configure-applications

ambition/install-applications

update-applications

user-management

component: fediversity panel

component: nixops4

estimation high: >3d

estimation low: <2h

estimation mid: <8h

infinite points

project-management

role: application developer

role: application operator

role: hosting provider

role: maintainer

type: deliverable

type: key result

type: objective

type: user story

user experience

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Blocks

#289 key features improving user experience supported

fediversity/fediversity

#613 User management

fediversity/fediversity

Depends on

#228 [D2.3] brought into production [2027-11-01]

fediversity/fediversity

#954 demo env broken

fediversity/fediversity

Reference

fediversity/fediversity#212

No description provided.