SSO and nomadic federated identities (lemmy.world)

submitted 1 year ago by PropaGandalf@lemmy.world to c/fediverse@lemmy.world

10 comments fedilink hide all child comments

That's a feature I'd love to see implemented in the future, if you could log in to any federated service with one fediverse account. I think some newcomers might have hoped for this feature when they heard that you can see content from any platform with one account.

Unfortunately, you are currently tied to the UI and capabilities of the service you registered with. The features of a service like Mastodon, Lemmy or Peertube could actually be independent of where the account is stored. I'm thinking of Solid pods and it's ActivityPub implementation AvtivityPods where an account is like a capsule that can store data of all kinds and from different services.

With a registered account on one instance, you could log in to any other service and consume the content in the intended environment. Or maybe we could decouple the services completely from the instances hosting the pods, so that you have servers that only store the data from all the services and those that provide the front end of the services. What do you think about this?

top 10 comments

sorted by: hot top controversial new old

[-] DigitalWebSlinger@lemmy.world 9 points 1 year ago

Once upon a time, we had OpenID. You could host your own identity server and log in to websites with it.

Then the social giants introduced third party SSO buttons and OpenID kinda fell by the wayside.

[-] chronically_crazy@lemmy.world 4 points 1 year ago

I've been wondering how to accomplish this lately. I'm looking to host a few Fediverse instances for me and my friends to use. It'd be really nice for everything I run on those to have an SSO via the main domain or a login domain.

My idea was:

Lemmy.example.social
Mastodon.example.social
Pixelfed.example.social
Matrix.example.social

accounts.example.social

Is this possible, or in the realm of possible?

[-] PropaGandalf@lemmy.world 2 points 1 year ago

Have a look at Solid and ActivityPod. I think they are the closest to what you want to achieve.

[-] chronically_crazy@lemmy.world 3 points 1 year ago

I like the idea on paper. This feels like what the Fediverse needs. I'll have to tinker around with it.

[-] confluence@lemmy.world 3 points 1 year ago

*diaspora had something like this, but only in the sense you could easily migrate your identity with a few clicks. Not the same as a SSO, which would be great, imo.

[-] PropaGandalf@lemmy.world 0 points 1 year ago

Yeah, there is also nostr which has a similar approach and a bunch of other protocols.

[-] baronvonj@lemmy.world 2 points 1 year ago

That's would be the Bee's Knees.

[-] InfiniWheel@lemmy.one 2 points 1 year ago

So far the closest I've seen up until now is Pixelfed integrating a signin with Mastodon by default

[-] karrbs@kbin.social 1 points 1 year ago

And that is to signup with your mastodon at least for now, if memory serves me correctly

[-] sj_zero@lotide.fbxl.net 2 points 1 year ago

I don't really want people from any old instance hopping onto my sites using a SSO, but one thing I thing would be really nice is if you create an account on FBXL Social and it automatically creates the same account on FBXL Lemmy and FBXL Video (and FBXL Matrix and XMPP)

I feel like if I was ambitious it's something that could be done without a lot of coding knowledge.