Use IAM

[kelson42]

We have many systems with, so far, each of them having their own authentication/authorisation system. This is not subsaintable, it is a waste of resources to:

• Redo each time a similar piece of code
• There is solutions available which probably do anyway the job better than we do.

I want to use the CMS development project as an opportunity to setup such a system.

Requirements should be:

• Well known and well maintained
• Free or cheap solution
• Easy to use, as SAS or Docker images to deploy
• IDP system with usual authentication standards support, MFA, etc.
• Minal authorization system (based on role?)

[kelson42]

http://www.ory.sh/ Is the choice of the moment for me, but I'm open to any suggestion

[rgaudin]

Should be setup as an organization-wide tool and used in the CMS (and later other tools), right?

[kelson42]

@rgaudin yes at https://login.openzim.org (for example)

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be now be reviewed manually. Thank you for your contributions.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be now be reviewed manually. Thank you for your contributions.

[kelson42]

We have an account on ORY, so the goal is to make the user authentication against Ory. Probably using a similar method like WP1 with Wikipedia openzim/wp1#345.