Would something single sign on (SSO) even be possible? I think the convenience of having a single account for the family of federated platforms would be wildly convenient.

Of course folks could continue to have individual accounts on each platform if they wanted.

I also understand that it would create a very tempting target for hackers and it would need to use MFA (multi factor authentication).

Just a thought and I would like to see you all have to say.

Asking after having this discussion.

  • Not sure if this would help or not but what I want is to own my user, so I can bring it anywhere and not worry if an instance goes down since I own the user. Similar to email with your own domain, the provider I use for email could go down but I have control to the domain/email so I can switch to something else, but keep my user.

    • With mastodon, you can switch your user between instances and bring your followers and stuff with you. I guess the only problem would be is if the server you are leaving suddenly went offline, but I’m on a pretty decent server so I’m not too worried about it.

      I don’t think this is in Lemmy, but I imagine it will be at some point.

    • Yes, this would be nice. You can use .well-known redirects so that when someone searches your owned name they get redirected to a Fediverse account of your choosing. And you can update those redirects if you change accounts. But that’s not quite the same.

  • Decentralized identity is a field of active research. It’s tough, but very interesting. I’m particularly a fan of what nostr is doing, where accounts are completely separate from relays, and can post anywhere.

  • Honestly I think one of the bigger hurdles is the confusion about where to sign up. You have to choose an instance, preferably one that is “compatible” with you. But it hardly matters to the user because it’s all federated anyway. Just give me a server that will stay up.

      • Yeah, I had joined Beehaw shortly before they defederated. I knew this happened, but I thought “meh, it’ll be alright”. I tried to make the best of it… but at the end of two weeks I was asking myself “Is this all there is to the fediverse? It’s pretty disappointing”.

        So before I gave up on Lemmy and the fediverse, I looked for a new Lemmy server that wasn’t defederating nor defederated from the fediverse. Eventually, I settled on Lemm.ee and I see know just how much of the fediverse was being filtered out for me.

        disclaimer: I don’t fault Beehaw for their decision to defederate. It is their choice to make, and I greatly admire and respect their transparency in the matter. However, for myself, I don’t need, want or appreciate these extra guard rails “to keep me safe”. I’m an adult and are willing to act and be treated like one.

  • Doesn’t SSO undo the decentralised nature of the Fediverse? What would it even add? You can already access a lot of different ActivityPub platforms from one (e.g. Lemmy can access kbin, Mastodon can access both) and that will only increase as development on these platforms increases.

    • Not really. The content of what is in the fediverse is still distributed and not owned or living in a single instance.

      It would add the ability to simply your username/instance/password administration.

      It would also allow an account to have an ability to create a community because if I find someone on Lemmy that has similar interests as I do it’s likely I would enjoy their content on other platforms.

      Right now people have to post all of their social media in their profile and then I have to go log into those platforms and go find them to follow them.

      If I found someone that I want to connect with on multiple platforms it be would be great if I could choose them through a “Follow Me Across The Fediverse” option where I could pick what platforms I follow them on.

      I think it could add a lot to the sense of community.

      • An Sso account would mean one identity across all instances, which can be tracked and monitored.

        Users using different account on different instances with different passwords are a lot more difficult to track.

        Googles entire operation is about connecting users across different websites using identifiers and so on, because that’s where the value is. All that data under one profile is highly valuable to them.

        It’s always like this by the way - users give up privacy for convenience or “safety”.

        Later, you add ads when it’s too convenient to move away from the service.

        • You could still make separate identities if you choose. At present you’re still using a single one to interact across the fediverse (unless, of course, you make another one in the same way), so no additional loss of privacy

      • But it would still require there to be some centralised account provider though, right?

        I think that optimistically as the Fediverse is developed you won’t need to have different accounts (unless you want to) as an account on one platform will be able to interact with another platform in exactly the same way as one created on that platform would.

        • No, any server instance could support sso as long as they agree on the protocol. If the one you’re using now turned it on tomorrow you’d be able to use it elsewhere.

  • Yes I think SSO would be a benefit.

    People are generally used to doing one of these:

    1. “Go to this website and register an account.” This is e.g Reddit.
    2. “Go to this website, register an account and you can access all these other services too”. This is stuff that Meta, Google etc offer via SSO. SSO is largely invisibile to the end user.

    Fediverse at the moment has a lot of “huh, why do different instances have different stuff and why can’t I just access all of that? Oh, I can? But why is it so complicated? Why can’t I just use it from one place?” that is definitely a hindrance to adoption until enough people are there to tell “do it like this” or the system becomes more user friendly and abstracts some of the inconveniences.

    As it is, e.g Lemmy can’t even do pagination right, so there’s still a lot of work to be done before it’s a polished experience.