cross-posted from: https://lemmy.giftedmc.com/post/78146

Hi folks! Today I have asked myself if I could login with one (no, not google or apple or micosoft) account in all the (30 I think) forums that I have to use as a FOSS admin. Nextcloud Forum, Ubuntu Forum, Mint forum, Makemkv Forum, Papermc Forum, linux.org, etc.

We obviously are on a forum-like social platform but we cant make people use this as their forum I suppose. Ideally, I'd like to federate "all forums" so to speak but that would probably take a shit ton of work. https://socialhub.activitypub.rocks/t/does-this-forum-use-activitypub/2545/2

If not federate the content, maybe federate the logins. So that the profiles federate from one place to the next and you can login anywhere without having 30 different passwords for one "service" (forum in this case).

The next step down would be a foss SSO solution. There seem to be some but I hardly see any pages mention them possibility at all. https://sennovate.com/best-open-source-single-sign-on-solutions/

Am I missing something or is this still in the distant future?

Thanks for reading. Have a good one.

you are viewing a single comment's thread
view the rest of the comments

[–] atomkarinca@lemmygrad.ml 3 points 11 months ago (1 children)

i don't know if all of those forum software supports this but this is why we have OpenLDAP for. you can have username as a login criterion and not full username@site.tld. that way when you create a user in one place, you would have that same user everywhere.

[–] haui_lemmy@lemmy.giftedmc.com 0 points 11 months ago (1 children)

I only know ldap from corporate infrastructure when you have 1000 users and 1000 computers which get switched. Can you elaborate why this would work with forums and social media (if they had support)?

[–] atomkarinca@lemmygrad.ml 2 points 11 months ago* (last edited 11 months ago) (1 children)

ldap is a central authority server. when you have ldap supported software, you can alliviate authorization to a central server. and if you make it so that you only need username for credentials (uid=%s,dc=example,dc=com in ldap jargon), you centralize your user database.

that's what i use on my home server. it takes most of the user registration hassle away.

edit: by the way dc=example,dc=com is just an arbitrary value, you don't have to have certbot certification for that or anything.

[–] haui_lemmy@lemmy.giftedmc.com 1 points 11 months ago

Interesting! Thanks for elaborating.