Blogs.gnome.org's migration to GNOME SSO

Infrastructure
1

Hello,

As you may be aware, we’ve been trying to consolidate as many services as possible to use GNOME SSO and provide a unified authentication layer for GNOME contributors. The last remaining service requiring migration is blogs.gnome.org.

The challenge is that WordPress does not include a production-ready OpenID/SSO plugin that is free of charge and also comes with the features we need. I recently reached out to the miniOrange team to ask if they were interested in an infrastructure partnership with the GNOME Project, and they have accepted.

I’m happy to announce that starting later this week, when you log in to your blogs at blogs.gnome.org, you will see a new “GNOME SSO” icon. Simply click the icon and use your GNOME Account credentials to log in.

There is no action required on your part; we have updated the email addresses linked to your accounts to match those in our authentication backend.

We are also finalizing a few additional items:

  1. Changes to site creation: Once the change is live, you will log in at https://blogs.gnome.org/wp-login.php and then be able to create a new site directly from within the WordPress Multisite interface (My Sites → Add New Site) or by pointing your browser to https://blogs.gnome.org/wp-signup.php directly.

  2. Documentation: Once the first point is complete, we will update the GNOME Handbook accordingly.

Thanks!

PS If you had a blogs.gnome.org account before but never received a GNOME Account, please open an issue at Issues · Infrastructure / Infrastructure · GitLab and we’ll be able to help you out

5 Likes
2

Some of us have access to multiple blogs like engagement and extensions. Would that all work? Big thanks to miniOrange team! Is this something we can share on social media?

3

This change affects authentication, not authorization, which means after a successful SSO login you will be redirected to the same account you previously had and in turn with the same set of subsite permissions you had before.

I’ve asked miniOrange if they’d be ok for us to share this partnership in social media, I’ll let you know via this thread as soon as I hear back from them, thanks!

4

@sri, miniOrange’s Team reached out to me confirming they’d be happy to appear in GNOME’s social media as you suggested. They provided their social account handles:

Can you please take it from here? Feel free to let me know once we have posts out and I can have them forwarded to their representative, thanks!

5

This change is now live and SSO is the only allowed login option, please report any issue here or via Issues · Infrastructure / Infrastructure · GitLab.

6

Yes, can do. Thank you!