- Identify accounts with the same email address and add association to the master user account, so single sign-on knows which account to pick up on subsites, or whether it needs to create one. Do this only once at the start.

- Make it possible for users to associate an account on the subsite with the master site, if the automated association did not work out. Have this option for some time.

Subsites will have user signup disabled, and you either (1) associate your existing account with the master account or (2) login with a master account which was created on the identity server.

Comments

gábor hojtsy’s picture

gábor hojtsy
he/him
Primary language Hungarian
Location Hungary
commented
Issue tags: +drupal.org identity
gábor hojtsy’s picture

gábor hojtsy
he/him
Primary language Hungarian
Location Hungary
commented
Title: Merge userbases within subsites » Relate the subsite users to the master identity users
gábor hojtsy’s picture

gábor hojtsy
he/him
Primary language Hungarian
Location Hungary
commented

This is pretty well specced at http://drupal.org/node/363722

gábor hojtsy’s picture

gábor hojtsy
he/him
Primary language Hungarian
Location Hungary
commented

Copying the idea from that page verbatim, since it is being repurposed as a better general overview.

Code needs to be written to implement the linking between existing accounts on *.drupal.org and id.drupal.org. This process can be implemented by intercepting the login process like so:

  • Local user olav logs into groups.drupal.org. The login attempt is redirected to id.drupal.org/user where the user logs in with the drupal.org username/password. If none existed previously, the user registers a new account.
  • Redirected back to groups.drupal.org, the user is requested to log in with his existing g.d.o username.
  • After a successful login the two accounts are linked.
    killes@www.drop.org’s picture

    killes@www.drop.org commented

    This answer is wrt the bakery project: http://drupal.org/project/bakery

    1) user olav cannot log into g.d.o directly, there is a link that sends him to either www.d.o or id.d.o

    2) if no account exist, a new one needs to be created (as normal)

    3) If an account exists and the login is successful, the user can be directed back to g.d.o where he will be

    a) automatically be logged in if a matching local account exists

    b) an account will be created otherwiseand the login will be done automatically after that.

    drumm’s picture

    drumm
    he/him
    Location NY, US
    commented
    Status: Active » Closed (fixed)

    I believe this has happened, except for the straggling accounts requesting fixing from g.d.o.

    Component: Database » Servers