3 ms·
> What I would like to see is for Matrix Decentralized Identity to be able to be used as a SSO for other sites. We haven’t figured out how P2P Matrix will work
by Arathorn 4y ago
> What I would like to see is for Matrix Decentralized Identity to be able to be used as a SSO for other sites.
We haven’t figured out how P2P Matrix will work with authentication yet - it’s kinda ironic that for normal Matrix we are moving to OpenID Connect (ie shifting SSO to normal OIDC providers)… but at the same time P2P Matrix identity is inevitably linked to owning a private key.
The solution may to be ensure that OIDC itself has a way to log people in based on presenting a private key - be that your P2P Matrix identity or something else :)
- dane-pgp 4y ago> The solution may to be ensure that OIDC itself has a way to log people in based on presenting a private key Isn't that what the OIDC people are trying to achieve with SIOP (Self-Issued OpenID Providers)? The work on that extension to OIDC is a bit new[0], but it seems to share Matrix's goal of decentralisation by letting users have portable identities that aren't dependent on big providers. There is also work to make these SIOP identities integrate with the wider W3C Decentralized Identifiers (DID) ecosystem, through DID-SIOP[1], so that might create some more opportunities for interoperability. [0] https://openid.net/specs/openid-connect-self-issued-v2-1_0.html https://openid.net/specs/openid-connect-self-issued-v2-1_0.h... [1] https://www.didsiop.org/ https://www.didsiop.org/
- bb010g 4y agoDoes the OpenID Connect work also include IndieAuth work? It seems like a natural fit for Matrix, given the shared focus on decentralization.