This is done, and Horizon logins will now happen via the standard SSO
dialog.
If you encounter odd or bad behavior[0] with the new setup, please open
a bug on phabricator!
-Andrew
[0] Other than the strange logout behavior which is already documented
at https://phabricator.wikimedia.org/T374123
On 9/4/24 12:25 PM, Andrew Bogott wrote:
tl;dr: Horizon login might be broken and/or look different off and on
tomorrow.
As part of ongoing gradual work to turn wikitech into an SUL wiki[0],
tomorrow we'll be switching Horizon over to use the WMF's
single-sign-on platform[1]. Here's what to expect:
- We probably won't get it right the first time, so Horizon logins
might be broken on and off tomorrow, Thursday, 2024-09-05
- Presuming all goes well, we'll leave things to use SSO, which means
the login dialog will look different from before.
- Login will use the same credentials as previously. If you're used to
logging in with your shell name, you may need to switch to using your
username instead (in other words, the name you would log into wikitech
with.)
- During this transition 2fa will no longer be required on Horizon.
Later in the process (possibly several weeks from now) the 2fa prompt
will appear in the SSO panel, at which point you'll be able to use the
same codes as before. Don't remove the codes from your 2fa app!
Bonus pointer: For account and key management which you might
historically have done on wikitech, you should now use
https://idm.wikimedia.org/. Wikitech logins remain unchanged for now
but most account-editing options have been removed.
[0] https://phabricator.wikimedia.org/T161859
[1] https://phabricator.wikimedia.org/T359590
_______________________________________________
Cloud-announce mailing list -- cloud-annou...@lists.wikimedia.org
List information:
https://lists.wikimedia.org/postorius/lists/cloud-announce.lists.wikimedia.org/
_______________________________________________
Cloud mailing list -- cloud@lists.wikimedia.org
List information:
https://lists.wikimedia.org/postorius/lists/cloud.lists.wikimedia.org/
