This is done, and Horizon logins will now happen via the standard SSO dialog.

If you encounter odd or bad behavior[0] with the new setup, please open a bug on phabricator!

-Andrew


[0] Other than the strange logout behavior which is already documented at https://phabricator.wikimedia.org/T374123

On 9/4/24 12:25 PM, Andrew Bogott wrote:

tl;dr: Horizon login might be broken and/or look different off and on tomorrow.


As part of ongoing gradual work to turn wikitech into an SUL wiki[0], tomorrow we'll be switching Horizon over to use the WMF's single-sign-on platform[1]. Here's what to expect:

- We probably won't get it right the first time, so Horizon logins might be broken on and off tomorrow, Thursday, 2024-09-05

- Presuming all goes well, we'll leave things to use SSO, which means the login dialog will look different from before.

- Login will use the same credentials as previously. If you're used to logging in with your shell name, you may need to switch to using your username instead (in other words, the name you would log into wikitech with.)

- During this transition 2fa will no longer be required on Horizon. Later in the process (possibly several weeks from now) the 2fa prompt will appear in the SSO panel, at which point you'll be able to use the same codes as before. Don't remove the codes from your 2fa app!

Bonus pointer: For account and key management which you might historically have done on wikitech, you should now use https://idm.wikimedia.org/. Wikitech logins remain unchanged for now but most account-editing options have been removed.


[0] https://phabricator.wikimedia.org/T161859

[1] https://phabricator.wikimedia.org/T359590