Require typo3.org account for Slack Users

A single login for the entire TYPO3 ecosystem is the way to go.

I also like approach with single user for all TYPO3 system

so typo3 forces me to set up an account at slack which (maybe) i dont want to use… at a company in the US? Am i right? you know i am a slack user but i can imagine some users dont want their data sent to slack…

LDAP should be the central directory for any TYPO3 service, so yes, absolutely the way to go :+1:

You’re not forced to create a Slack account at all. If you create a TYPO3.org account, nothing will happen with Slack by default, but if you want to use Slack, you’ll be forced to log in with a TYPO3 account because this will be the only enabled login method.

I don’t see any problems here therefore.

I like the SSO thing too. But you have to make sure, the existing user accounts don’t get mangled.
I am fine, if I would have to do some manual action on that, and I will prefer instead of you do something with my account, which seems at least a little bit risky …
And don’t forget about that: https://www.fastcompany.com/40547684/slack-picked-a-weird-time-to-make-it-easier-for-bosses-to-download-your-private-chats
→ deep impact on privacy …

It’s a good point, of course, first priority will be LDAP // SSO for all the TYPO3 services. One suggestion, we can try to find the way to smartly integrate slack - of course without forcing and taking permission of a user. eg., Whenever a user create an account at TYPO3.org then we can send an invitation to join Slack eg., https://gist.github.com/ardeay/0fd2b295675ee99f784bfb89bffe6757 In the same way, we might set slack bot which invites all existing slack user to setup TYPO3 account - Just my opinion :wink:

SSO would be nice. If it’s technically feasible it should be checked how the users of both can be combined and what the legal implications are.

Yes, that’s what I meant - so you’ll be able to use one account for everything but we don’t send any of your data to slack when you create an account.

I like that idea too. However, keep in mind that we’re on a standard plan in Slack. I see no way to enable LDAP in our settings (I’m admin so I should see it).

If we decide to use LDAP, then someone needs to get in touch with Slack and check if they permit the feature for us.

I suggest this way to enforce it:

  • tell all users that they need to move to my.typo3.org to link their slack acounts
  • Disable all exisiting users in slack
  • Let users re-enable their accounts during the “linking process”
  • Allow new accounts only via my.typo3.org

This is not an easy topic :slight_smile: I am in favor of course of the “single login for all TYPO3 ecosystem”. The problem is that it is difficult to make people change their habits, and every enforcement could lead to moodiness.

Yes, that is a good idea; I don’t think that an automatic creation would be good (personal opinion)

about the opposite road, i.e.

As I said, I fear that this kind of enforcement would lead to a massive quit of people… IMHO this kind of transition should be handled very carefully, with a long-term “deprecation strategy” I don’t know if I have explained myself

@erredeco basicly agree on that. Maybe it makes sense to have it done in several steps.

  • Blog Posting about that and message about the blog post to all slack users
    • Deprecation strategy … transition time … etc.
  • First only allow new users via my.typo3.org
  • Second inform users during login about my.typo3.org
  • Third deprecate direct access

I’m very unsure about the timeframes we are talking about.

The deeply disturbing about this discussion: it clarifys, that I am the only one here so far, who is concerned about privacy and DSGVO / GDPR.

I am against this kind of enforcement. In the past, we told everybody: “Hey come over to slack, we will help you on short notice.” And now we want to make it a bit more difficult by adding the my.typo3.org layer?

Why do we need to get “a better data quality” about those 2140 Slack Members that posted 2 or less messages?
I see no use in creating “terms and conditions” for the usage of Slack. The only applicable “terms and conditions” are those from Slack.

How should that be happen? How would do you define “active user base”? How would you messure that? What do you want to do with this knowledge?

Could you explain more detailed, which kind of data you want to publish here? Or how do you what to “move traffic” to talk? I guess that would be a good example for this DSGVO stuff.

I guess, that would be the best way to filter out all those users, that stayed quite for a while / never intended to talk / where to shy to talk and scare them out of the community. Great success - not.

So in my opinion, that is the perfect way to sabotage this kind of working community perfectly. If you want the active Slack users creating an account on my.typo3.org - ask them and let them do so voluntarily. But I am pretty sure that those, who consider themselves as active already have an account. So offer them the possibility to link there two accounts in the profile. Might be nice.

Don’t enforce anything. You will scare people away and will create a very bad reputation about TYPO3. As in “Those TYPO3 guys just want to talk to me, if register myself as a TYPO3 user.”

It seems to me we are mixing several topics together and I think we should be very clear about what wants to be acchieved with what, what we currently have, what is the problem (if any) with the current system and what can be done with what.

If it makes sense to create a central authentication for the users, ok. I am not convinced that one of the initial goals “moving more people to talk.typo3.org in order to make discussions publicly available and visible” should or must be achieved with forcing people to get a certain account. I don’t like the idea of forcing them. Just because someone has typo3.org account, doesn’t mean they will automatically use talk.typo3.org. If people find it valuable, they will use it.

I also think this could seriously annoy some people, esp. something like disabling them in slack. Also, even if their data is not in any way relayed to Slack without their consent, one must be very careful how this is communicated and done.

if we want all slack-accounts to be based on a my.typo3.org account: what about Stack-Overflow. I doubt we can sync all accounts regarding TYPO3.
Especially if we want consider data regulations and want data storage in europe.

in this case the local information (email) already will be stored at slack. not so good. :frowning:

hi Bernd, Slack won’t be mandatory. In fact, we want to move more people towards Stack Overflow and talk.typo3.org (once the forum is migrated).

But we want, that people who are using our infrastructure and services, accept our conditions.

Further we wan’t to be able to offer our community a central place to maintain there data and services.

About moving people to Stack Overflow: I would just like to comment on this because I think it is very important.

Maybe a little off-topic for this thread, but it should be made very clear to everone, that trying to get people to use a certain site or tool is not an easy task and StackOverflow in itself is a very special case.

Just for the heck of it, try to ask a beginner question on StackOverflow. Or try to ask what would be a good search extension for TYPO3 or the future of Extbase. Or better still, don’t ask something about TYPO3, ask about PHP or something else with more traffic where people actually close, delete and downvote questions. And yes, you can get banned for asking low-quality questions (didn’t happen to me).

So, a totally different concept from what we have in Slack right now, where people can ask stupid questions and I for example did ask a lot of them and the experience is very much different.

Now the more experienced people will know what to ask on SO and what is a better fit for Slack or something else. But, this should be made very clear and it should be clear to everyone here and must be considered before we start directing people here or there and disrupting something which works quiet well. I’m with Jan on that.

StackOverflow is a great site but it cannot be used for everything. It is not a support forum, that is stated very clearly. I have read a lot of stuff on https://meta.stackoverflow.com and if necessary I can dig up some more data and examples for making a little clearer, what I mean.

What I would like to see more is having a place to search for answers, but actually even better would be if the documentation would be updated and extended and some things simplified. Then people wouldn’t need to ask so many qustions in the first place …

This topic was automatically closed after 14 days. New replies are no longer allowed.