1279217 - Replace Persona with an alternative login solution on blog.mozillabd.org

Status: RESOLVED FIXED

(Websites :: Other, defect)

Description

[Gene Wood [:gene]]

Persona will be decommissioned by the end of 2016, and I'm trying to ensure that all the work we need to do between now and then is captured under the following meta-bug:

  https://bugzilla.mozilla.org/show_bug.cgi?id=1197381

I couldn't find an existing bug for migrating Mozilla Bangladesh Blog away from Persona, so I'm creating one.  If there is an existing bug, please link it under the above meta-bug and close this one out.

Here is a page with more information on migrating away from Persona, which we'll continue to maintain and update over the year as various Mozilla properties make the move:

 https://mana.mozilla.org/wiki/display/Identity/Persona+migration+guide+for+internal+sites

Comment 1

[Gene Wood [:gene]]

:nukeador, should this request also go to pierros (like https://bugzilla.mozilla.org/show_bug.cgi?id=1273038#c2 )?

Hi, I'm part of the Mozilla Enterprise Information Security team (previously called Opsec) and the previous devops engineer for Persona. In advance of the shutdown of Persona on November 30th[1], I was hoping to both find out what was planned, in regards to authentication, as well as offer up assistance and alternatives if needed.

Firstly, I'm hoping to communicate with either the developer/development team capable of modifying the authentication code for the site or the manager responsible for the site. If I've made this request to the wrong person, please let me know, and feel free to ignore the questions below. If you happen to know who the right person is and can share that with me even better.

If you'd prefer to just have a short discussion over Vidyo instead of writing a response, that's totally fine, either say so and I'll set it up or send a calendar invite to me to chat.

* Has an alternative authentication solution been selected for the site, if so what is the new planned auth solution?
* Is there a timetable and resources to complete the development of the change before November 30th?
* Would you like any help in coming up with an alternate auth solution? We have reference architectures for a handful of frameworks. If so, either schedule a Vidyo call with me or I will schedule one with you.
* How would you characterize your site's userbase? Do users that login currently consist only of people with Mozilla LDAP accounts? Do Mozilla contributors/community also currently log into the site? Does the general public log into the site?
* Since your currently using Persona for auth I'm assuming that your site doesn't have access to metadata about users stored in LDAP (e.g. first and last name) or access to LDAP group information of users (e.g. what Mozilla team they're in). Would your site benefit from this type of information if it were available in the new auth solution?
* Does your site accept other login methods beyond Persona currently (e.g. github, mozillians, google+) and if so which ones?
* Do you currently take advantage of the branding capabilities[2] of Persona which allow you to put your site's logo or site name in the Persona login popup? Do you have requirements for your replacement auth solution related to branding? A specific example around branding is the fact that the Firefox Accounts auth solution has "Firefox" branding associated with the login process which may or may not be acceptable to you for your site.


[1]: https://wiki.mozilla.org/Identity/Persona_Shutdown_Guidelines_for_Reliers
[2]: http://identity.mozilla.com/post/27122712140/new-feature-adding-your-websites-name-and-logo

Comment 2

[Rubén Martín [:Nukeador] ❌ [away till Aug 31st]]

(In reply to Gene Wood [:gene] from comment #1)
> :nukeador, should this request also go to pierros (like
> https://bugzilla.mozilla.org/show_bug.cgi?id=1273038#c2 )?

Well, in this case we don't maintain community sites.

Adding Tom who has visibility on who's the technical contact for mozillabd.org

Cheers.

Comment 3

[tad]

Looking into the ownership of this.
I don't currently know, but we'll investigate it.

Comment 4

[Ryan Kelly [:rfkelly]]

Hi Tom, any update on the status of this as we enter the final month until Persona EOL?

Comment 5

[Ryan Kelly [:rfkelly]]

I received this update out-of-band:

"""
Mozilla Community Web Services is taking care of this issue. Currently, Yousef Alam is acting on behalf of MCWS. In this capacity he is clarifying if MozillaBD will move to Google Login.
"""

So I'm switching the ni? here to Yousef for confirmation/status on the update to Google Login.

Comment 6

[tad]

We've determined that for now, please talk to [e-mail] about any requirements from Mozilla for Bangladesh community properties.

We do not have a defined ownership of their community yet, but MAK has been working on technical stuff there.
CCing him.

Comment 7

[tad]

Apologies, I restricted the wrong bug... could somebody with access remove remove the restriction please?

Comment 8

[Yousef Alam [:yalam96] (use NEEDINFO)]

We've contacted MAK a couple of days ago but not heard a response back.

We (Tom and myself) also don't have access to this instance so there's not much we can do here.

Comment 9

[Mahay Alam Khan]

We've revoked Persona from our mozillabd.org site; we sent emails to all to change their passwords, also posted in community channels and groups. Sorry for responding lately.

Comment 10

[Ryan Kelly [:rfkelly]]

OK great, thanks for the update!  I will go ahead and close out this bug.