Live data from Hacker News

Persona makes signing in easy for Gmail users

identity.mozilla.com

11–20 of 122 posts

Re: Persona makes signing in easy for Gmail users

#12

I'm looking forward to when their LDAP adapter [1] is ready for prime-time so that we can use it internally for our own email addresses. I'm curious if the GMail adapter would work if you host your company email at google? [1] https://github.com/mozilla/vinz-clortho/

We're using Vinz Clortho in production right now (try to log in as callahad@mozilla.com and you'll be prompted for my LDAP password).

It's not super generalizable, but if you're interested in rolling it out on your end, ping our mailing list (https://lists.mozilla.org/listinfo/dev-identity) and we're happy to support you while you get that going.

A generic Google Apps bridge is somewhat tricky, but we're really interested in prototyping it over the next few months.

Re: Persona makes signing in easy for Gmail users

#14
post #9

It doesn't work with google apps, unfortunately. Which is completely logical when I think about it since persona would not use the mx record to find the identity provider.

Actually, why not?

Looking for that "aspmx.l.google.com" entry in the MX record would let them know, with a high degree of certainty, that Google is the login authority for that particular email address.

Is there something I'm missing?

Re: Persona makes signing in easy for Gmail users

#17

I like idea of Persona, but the idea of requiring emails prevents me from ever implementing it. There are plenty of places where I need an identity system, but don't want to force users to fork over their email address.

You almost always want their email address so that you can email them a password reset link in case they forget their password, which is even more important on smaller obscure sites where that's bound to happen.

Re: Persona makes signing in easy for Gmail users

#19
post #9

It doesn't work with google apps, unfortunately. Which is completely logical when I think about it since persona would not use the mx record to find the identity provider.

We're super interested in bridging to Google Apps, but it has some quirks that gmail.com itself doesn't, so it's on ice for the moment...
Post reply on HN