593522 - Support Hybrid Onboarding Authentication for Google Accounts

Status: NEW

(Bugzilla :: User Accounts, enhancement)

Description

[Max Kanat-Alexander]

Hybrid Onboarding essentially lets people use their Google passwords with another webservice. So, anybody could log into any Bugzilla with their Google account, without having to create a new account.

The original description of it is here:

  http://googlecode.blogspot.com/2009/11/hybrid-onboarding.html

I think that this would be considerably simpler than implementing generic OpenID or OAuth for Bugzilla, and would allow most technical people to log into every Bugzilla without having to create an account. It's also somewhat of a good stepping-stone to implementing full OpenID.

Of course, this should be either an authentication module or an option in the CGI authentication module, so that people can disable it for their Bugzillas if they don't want it.

I've linked to the general Hybrid Onboarding guide in the URL field.

I'm optimistically assigning this to glob in the hope that he is interested in this, since it seems like (a) a pretty interesting project and (b) something that would tremendously relieve one of the primary complaints that I see about Bugzilla, which is that people hate signing up for a new account at every Bugzilla they go to.

Comment 1

[Reed Loden [:reed]]

I'd rather Google not be my overlord.

Comment 2

[Max Kanat-Alexander]

(In reply to comment #1)
> I'd rather Google not be my overlord.

  The system works with various different authentication providers. Also, it's optional.

Comment 3

[Biju]

I see target=bugzilla 5, just curious, and when can we expect at bugzilla.mozilla.org

Comment 4

[Reed Loden [:reed]]

(In reply to comment #3)
> I see target=bugzilla 5, just curious, and when can we expect at
> bugzilla.mozilla.org

We won't ever be using this feature on bmo.

If you're tired about having a zillion logins, we may eventually tie into a Mozilla SSO system, but it'll be only for Mozilla sites.

Comment 5

[Biju]

(In reply to comment #4)
> If you're tired about having a zillion logins, 
Correct...

> we may eventually tie into a
> Mozilla SSO system, 
Wish we had it already...
Then we would have been one of the major site similar to 
many Social Networking Site

Thanks for info...

Comment 6

[Max Kanat-Alexander]

(In reply to comment #4)
> We won't ever be using this feature on bmo.

  reed, I'm pretty sure that you are not the authority who would be making that decision. Also, this is not the place to be discussing that. If you have political objections to this system, then you should take them elsewhere, they should not be in Bugzilla. IRC would be a more appropriate location.

Comment 7

[Max Kanat-Alexander]

 I'd like to make it clear to everybody here that Hybrid Onboarding is simply a term used to describe a particular use of OpenID, OAuth, and Portable Contacts, all of which are public standards. Google and Yahoo are probably the largest implementors of Hybrid Onboarding, but there's no reason that there couldn't also be many other providers.

Comment 8

[Frédéric Buclin]

We are going to branch for Bugzilla 4.4 next week and this bug is either too invasive to be accepted for 4.4 at this point or shows no recent activity. The target milestone is reset and will be set again *only* when a patch is attached and approved.

I ask the assignee to reassign the bug to the default assignee if you don't plan to work on this bug in the near future, to make it clearer which bugs should be fixed by someone else.