User:Wenzel/SSO:AMO-SSO Integration
Jump to navigation
Jump to search
SPEC: AMO/SSO Integration Prototype
Objectives
- Provide users with a single log-in across Mozilla web properties, starting with AMO / AMO Forums
- Secondary: Help evolve the Weave Account Manager standard for delegated authentication
Details
Association
Existing AMO users should easily be able to sign up for an SSO account and associate it with their AMO account, from the profile page.
They can disassociate their account there too.
New User Sign-up
SSO users who have never used AMO need to be able to log in via SSO, then fill in their account details to be able to use AMO.
- Open questions:
- How to transfer/prefill SSO's user metadata into AMO?
- How to update AMO when SSO metadata (email etc.) changes?
Login Page
The login page currently has a username and password field. Next to it, we'll need a button to "log in via SSO", along with an option to get more information (info popup? help page?) and a link to sign up for a new SSO account.
Offering an SSO username/password field right there is possible, albeit discouraged, but might overload the page visually?