flock

#357 [Talk-50] Break ice or don't login twice: FreeIPA experience in bridging OAuth 2.0 and Linux system authorization
Closed: Talk Scheduled by riecatnor. Opened by abbra.

Closed: Talk Scheduled
Reopen Issue

What is your proposal?

FreeIPA development has been focused on Linux systems management. Web-based applications meanwhile standardized around OAuth 2.0 authorization framework. The talk will discuss an effort to allow both worlds to interoperate seamlessly and secure. We will demonstrate how a transformation between OAuth 2.0 authorization grant and Kerberos ticket can be setup with FreeIPA to be able to enjoy single sign-on across all managed resources. We also show how to integrate FreeIPA with OAuth 2.0 identity providers as an identity source with upcoming FreeIPA SCIM v2 support and how to enable new types of hardware tokens to use in FreeIPA environments.

Target audience

Anyone interested in centralized management of Linux systems and integration with OAuth 2.0. This might include administrators, developers, home users deploying FreeIPA and other free software hosted solutions like Nextcloud, Fedora Infrastructure developers and administrators.

List each person by their name and FAS ID, as shown below:

Alexander Bokovoy (abbra)
Francisco Triviño García (ftrivino)

Is this a…

50 minute Talk

Who are you?

Name: Alexander Bokovoy
FAS ID: abbra
IRC Nick, if not FAS ID: ab
Timezone: Europe/Helsinki
Availability for August 4-6th: August 4-6th

Thank you for your submission!

At this time, your proposed session is under consideration for this year's Nest with Fedora event. The CfP review team have the following comments/suggestions to help improve your proposal, or make it more suitable for the audience we expect at Nest this year.

  • This sounds like a great talk for a sysadmin-focused conference. I don't see the clear relevance for Fedora contributors.
  • Could this talk be adjusted somehow to be more Fedora focused?

Please provide feedback based on these comments. We want to give everyone who submitted a proposal the opportunity to present at Nest if the content fits and there is still room in the schedule. Feel free to respond on this ticket.

If you have further questions or need assistance feel free to email mnordin (at) redhat (dot) com. Thanks again for your proposal!

We invite you to register for Nest with Fedora on Hopin at the following link.

No matter if your proposal is accepted or not, we hope you join Nest this year. Register here: https://hopin.com/events/nest-with-fedora-2022/registration
Edited by riecatnor

Hello.

Thank you for your suggestion. FreeIPA functionality is a core component of a release criteria for Fedora Server. FreeIPA unites several separate upstream projects which integrate first and foremost through the contribution to Fedora. Fedora infrastructure is also based on FreeIPA -- Fedora Accounts system is an extension of FreeIPA deployed by Fedora Infrastructure team.

The talk is very much Fedora focused. This particular topic grew up and was implemented due to Fedora Infrastructure asking FreeIPA team to support better authentication mechanisms to extend into contemporary authentication used by many web applications. It is a part of multi-year effort where Fedora infrastructure's use of FreeIPA was providing a key set of requirements.

Hi @abbra thank you for your response. If possible we would like to include this talk in Nest. We have a slot open on Friday the 5th at 19:00 UTC. Ideally, it would be a 25 minute session, but if you feel you need the entire 50 minutes to truly cover the topic, that would be okay. Please let me know if this time/date works for you and I will get it into the schedule. Thanks!

Hi @riecatnor, thank you for the offer. Friday the 5th 19:00 UTC is 22:00 my time. I can handle it but I do need 50 minutes to run the talk (and a demo I have).

Hi @abbra thank you for your flexibility- and confirmed it can run for 50 minutes. I had to shorten the title a little bit due to constraints on the event platform. I changed it to "Break ice or don't login twice: FreeIPA and OAuth 2.0" - if you want me to change it, please comment here and limit the new title to 60 characters. Thanks!

hi @riecatnor, thank you. Shortened title looks good.

Hi @riecatnor, looking at the published schedule at https://fedoraproject.org/wiki/Nest_with_Fedora_2022_Schedule, we have a 30-minute slot instead of 50 minutes one. Can this be adjusted, please?

Hi @abbra of course, all set.

Metadata Update from @riecatnor:
- Issue close_status updated to: Talk Scheduled
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.