- 🇺🇸United States jdleonard Austin, TX, USA
Curious whether there have been any recent discussions about this now that Keycloak has been implemented.
Thought of this again in the context of Member Platform → , which could become a viable platform for any given local association / DUG / affinity group to manage and communicate with its members and offer event registration.
As I mentioned in #21, there are numerous benefits to the Drupal community of allowing SSO against drupal.org for these groups.
@jdleonard Good point and what we wanted it since 2017 in the European community (i.e. for local GitLabs and sites). Having Keycloak solves the original technical issue to provide OAuth2 with Drupal itself.
But the administration/management issue is still the same as like drupal.org and drupalcode.org every community project/site/service would need a Keycloak client and probably access to the same realm of users?
@drumm @hestenet Did you already gain experience with federated Keycloak clients you don't manage? If not what are your concerns on the different use cases like user login or profile sharing with d.o. account?
- 🇺🇸United States anoopjohn Washington D. C.
It looks like KeyCloak supports OpenID Connect, and SAML for SSO. We really don't need any additional information from Drupal.org other than the email id saying that the email id has been authenticated through the drupal.org authentication system. For external clients - we don't even need authorization services from Drupal.org, just authentication should be enough.
In terms of setting up a site to start using it - Drupal already has OpenID Connect and SAML support. All we need to do is to configure Drupal.org KeyCloak server to allow authentication from a set of registered client appications (domains that are allowed to redirect requests to d.o). Keycloak already allows this out of the box.
If KeyCloak is already set up, then the next question is - is there anything that is preventing us from rolling this out for all our Camp websties to start using?
JD has started a thread for discussing this in the event organizers channel in Drupal slack - https://drupal.slack.com/archives/C03KZ3BETNH/p1740330500636009