KDE Identity: What sites does it cover?

Help
, ,
1

Hi,

I recently took an interest in a particular strand of ongoing development within KDE and hoped to subscribe to some MRs on invent.kde.org (just to be nosy, not planning to contribute or even discuss the work - above my pay grade lol).

Of course this requires an account, and on that site it is a “KDE Identity” account needed. The blurb tells me this gives “unified access to most KDE.org websites”. Great! Because I already have:

I actually checked and none of the above would get me into KDE Identity. It wasn’t actually my goal at the time, but it did get me interested in the idea of account consolidation and now I’m interested to know which sites besides the Gitlab KDE Identity actually supports?

Not that having multiple accounts is such a burden, but the idea of consolidating a bit is still appealing.

2

I agree, there should be a SSO-like option between all kde websites, all the popular sites have it, why not us?

3

The KDE Identity account works here at least but should also work for the userbase and techbase wikis.

I think Bugzilla is too old to support SSO. This is an ongoing issue also for other reasons but sadly hard to resolve for various reasons.

opendesktop.org is not a service run by the KDE community.

4

It would also be interesting to be able to use FIDO2 / WebAuthn / passkeys to authenticate on all KDE websites and services, in one or more ways.

Specifically, using a physical key (YubiKey) or a card (Badgeo NFC FIDO2 - NEOWAVE)

And to allow this by disabling the password, which is obsolete even without AI.

5

I mean we could migrate to a new site (I know it’s easier said than done, but still… It’s better to start doing it rather than accepting that we can’t right)

6

Thanks for the overview. So “most of” is doing some heavy lifting there … :wink:

Re Bugzilla I note that Mozilla’s supports login by github account so it is doable, but of course I’m sure it is no small task.

I get the point about opendesktop, but store.kde.org is a participant of it which given its domain is at least somewhat under KDE aegis (and is an active part of the community … isn’t it where all the KNewStuff comes from?). I’m not clear on how the umbrella entity interacts with sub-entities like ours that use it. You would think they had some options for supporting federated logins for their constituent communities since they are already doing so (sort of, internally).

If it were possible to transfer this account here onto a KDE Identity account (with its activity and other baggage intact), I’d probably do that. Is it?

7

Ah, this might have changed then.

I only vaguely remembered a discussion from several years back when upstream Bugzilla was barely maintained and each organisation running it had their own patches or even forks.

No idea either. I guess they would need to add support for external authentication providers and make KDE Identity one of them.

Probably a question for the Sysadmin team