Maniphest T198813

Integrate MFA into Gerrit
Closed, DuplicatePublic
Actions

Assigned To

None

Authored By

	Krenair
	Jul 4 2018, 8:40 PM

Tags

Referenced Files

None

Subscribers

View All 10 Subscribers

Description

See also T198810
Horizon does some tricks to link LDAP auth with Wikitech 2FA

Related Objects

Mentioned Here: T147864: Use IDP for authentication in Gerrit
T189531: All Wikimedia developer services should use single sign-on
T198810: Enforce 2FA for GitHub members

Event Timeline

Krenair created this task.Jul 4 2018, 8:40 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJul 4 2018, 8:40 PM

https://groups.google.com/forum/#!topic/repo-discuss/tkCL3-MsXGM

Personally I wish that gerrit just used oAuth and we just used on wiki SUL 2fa.... but i guess its a bit late for that.

Bawolff triaged this task as Low priority.Jul 9 2018, 11:16 PM

greg moved this task from INBOX to Next on the Release-Engineering-Team board.Jul 13 2018, 11:19 PM

greg edited projects, added Release-Engineering-Team (Next); removed Release-Engineering-Team.

This would require a plugin to be created.

greg edited projects, added Release-Engineering-Team (Backlog); removed Release-Engineering-Team (Next).Feb 12 2019, 10:51 PM

Legoktm merged a task: Restricted Task.Mar 21 2019, 8:45 PM

Legoktm added subscribers: jijiki, Legoktm, greg and 2 others.

In T198813#4410058, @Bawolff wrote:

Personally I wish that gerrit just used oAuth and we just used on wiki SUL 2fa.... but i guess its a bit late for that.

Gerrit does have support for OAuth though :] There is some devil involved in username case sensitivity though.

Just note that this task looks very important to me. I think it should really be solved in one way or in another.

Framawiki awarded a token.May 28 2019, 6:07 PM

See also T147864 which is for OAuth but might well be rejected in the end in favor of having a single sign on system that would come with MFA: T189531: All Wikimedia developer services should use single sign-on.

• Phabricator_maintenance edited projects, added Release-Engineering-Team-TODO; removed Release-Engineering-Team (Backlog).Jun 12 2019, 11:53 PM

• Phabricator_maintenance moved this task from Should be empty (use Release-Engineering-Team) to Later / Need volunteer on the Release-Engineering-Team-TODO board.Jun 12 2019, 11:55 PM

greg added a project: Release-Engineering-Team.Jun 21 2019, 10:35 PM

greg edited projects, added Release-Engineering-Team (Development services); removed Release-Engineering-Team.Jun 24 2019, 7:51 PM

• chasemp added a project: Security.Feb 10 2020, 11:00 PM

• chasemp removed a project: acl*security.Feb 20 2020, 8:08 PM

thcipriani removed a project: Release-Engineering-Team (Development services).Apr 20 2021, 1:22 AM

thcipriani edited projects, added Release-Engineering-Team (thcipriani-workboard-fiddling); removed Release-Engineering-Team-TODO.Apr 20 2021, 3:42 AM

thcipriani moved this task from thcipriani-workboard-fiddling to Seen (ARCHIVE) on the Release-Engineering-Team board.Apr 20 2021, 3:54 AM

thcipriani edited projects, added Release-Engineering-Team; removed Release-Engineering-Team (thcipriani-workboard-fiddling).

thcipriani edited projects, added Release-Engineering-Team (Seen); removed Release-Engineering-Team.Apr 20 2021, 3:23 PM

hashar closed this task as a duplicate of T147864: Use IDP for authentication in Gerrit.Mar 11 2025, 8:37 AM