-
Notifications
You must be signed in to change notification settings - Fork 185
Context
Currently the user can login with Google and a Local User/Password (as well as Facebook in a temporary branch but this was mostly a proof of the recently proposed schema design in #6716).
Goal
We want to identify and prioritize alternative universal "Login with [Service]" buttons (pop-up based) to expand our single sign-on (SSO) options.
For example, platforms like Overleaf support ORCID and IEEE accounts to target academic users, while developer platforms heavily utilize GitHub or GitLab.
Scope & Technical Requirements
Protocol: Ideally supports standard OAuth 2.0 or OpenID Connect (OIDC).
(We can support other options, but it would require a bit more leg work to set up.)
Payload Requirements: The provider must expose endpoints to reliably retrieve:
- A verified primary email address
- The user's name
- A permanent, unique user ID (sub claim)
Out of Scope (For Now):
Custom Enterprise, University, or Workplace SSO (SAML, Shibboleth, or tenant-specific Okta/Azure AD setups)
Questions for the team
What services make good potential options?
All reactions
Replies: 4 comments
@Neilk1021 Please give an update about this discussion.
All reactions
Update: I'll be adding support for Apple, IEEE, and ORCID all as flags. If there are any issues with these options, please mention them in this chat!
All reactions
@Neilk1021 Please include all the related issues.
All reactions
Created issues for these logins in #7513