Authentication, SSL and user account management

[nblumhardt]

As it says on the box.

[thegreatco]

At a minimum I would really like to see basic password authentication (no user, just password). Right now we're stuck hiding it behind a VPN.

[nblumhardt]

Thanks for weighing in, I'll try to bring this one forward a bit.

[andymac4182]

It would be great if a single SSL session could be opened using Client certificate auth similar to how octopus deploy works. This will allow us to use it across domains.

[bojanrajkovic]

It'd be nice if authentication is pluggable—we have our own single sign-on system that it'd be nice if we could reuse.

[nblumhardt]

Thanks for the suggestions, will dig into this and see how we go.

[nblumhardt]

User accounts are done; the default install is still authentication-free, you can switch on accounts via the Users tab:

The permissions system is very basic - everyone has read/write access to pretty much everything except settings, which require the "Is Administrator" permission.

I've broken out two more tickets - one for SSL configuration, the other for pluggable auth providers (only simple username/password auth this time through).