top | item 45375152

(no title)

noident | 5 months ago

Does this depend on sliding sync and their standalone authz server like Element X does?

I'd love to use Element X, but Element abandoned the form of SSO my community depends on, and I don't really have an appetite to spend 12 hours of my free time standing up sliding sync, a separate auth server, migrating my users to the separate auth server, spending hours explaining to everyone that their credentials live in some other place now, and then migrating my custom server admin software to use OpenID connect. Oh well.

discuss

order

joecool1029|5 months ago

> I don't really have an appetite to spend 12 hours of my free time standing up sliding sync

This has been built into synapse now for months, maybe a year. Does not require a second sliding-sync component anymore.

noident|5 months ago

That's great!

What about Matrix Authentication Service? That's still a separate piece of software that requires PostgreSQL (as opposed to SQLite like my Synapse instance uses) and has no clear migration path for those of us using our own SSO solution (SAML, CAS, maybe your own OIDC provider like Keycloak...), right?

I don't want to run Dex and complicate the stack further, either.

I think 12 hours to migrate is probably optimistic even with built-in sliding sync, actually...