Summary

TransAdvice? currently utilises a CAS based SSO provider which is deployed as part of the legacy Drupal 7 CMS. This allows authentication to other TA services such as the wiki and our Kanboard.

To allow us to explore removing Drupal, migrating to a static website generator and separating CiviCRM? out as a standalone module. We need to first migrate to a new identity solution.

Authentik (https://github.com/goauthentik/authentik) is a solid option for this and may be a good place for the committee to start.

Action

The technical committee should design, document and deploy a new authentication solution that is separate from Drupal. The new solution should support OIDC and be relatively trivial to maintain.

Once deployed, services that rely on CAS should be moved over to the new platform and an effort should be undertaken to migrate other services over to SSO.

There should be no expectation of migrating users from Drupal to OIDC due to the low user count and potential complexity of doing so.

Who

Technical Committee

Timeframe

The proposal will likely take a few months to implement and would be a long lasting project for the technical committee to maintain.

Categories: Proposals