Social login
-
Hi. I have a question that is complicated, but would be very useful.
I administer a Cludron setup for a volunteer association, and have a huge problem with passwords. As they don't use the services in a daily basis, but rather occasionally, people constantly keep forgetting their Cloudron password. And many stop using the services because they get tired of the process of getting the link to reset the password and choosing a new one each time they want to consult the nextcloud or comment something in the chat. So they revert to using whatsapp or gogle drive, and the association loses the track of all this data.
I think it would be much better if they could login with their google, twitter or instagram accounts.
I know that it's not simple, because of the single-sign-on mechanism used in Cloudron, via LDAP. But I wonder if there is any possibility.
Currently, the most important apps we are using are Nextcloud, Rocket.chat and Wekan. I know at least the two first one have social login capability. Do you think I could set it up, and would it work with users synchronized with the Cloudron LDAP directory?
Thanks
-
@andres-moya I disagree with this. Singing on with a commercial password from one of the services you mention can introduce a security breach. That's what I believe anyway.
-
@andres-moya Would it make sense to set up those apps without Cloudron authentication and then setup social media login inside those apps? For example, this is what we do with our public facing apps like git.cloudron.io (GitLab), our old public facing Rocket.chat etc. I see that Wekan currently doesn't have a way to skip Cloudron user management, but we can fix that if this idea is interesting to you. Also, this only makes sense if Wekan has Social login support in the first place.
-
I still need cloudron login, because many people are using it now.
I'm going to try to activate social login in nextcloud and rocket chat, and see if it merges the social token with the existing account. If so, the problem should be solved.