End of OpenID in Fedora
summary
Fedora removes legacy OpenID and migrates services to OIDC, with OpenID decommissioned early May 2026. A separate Epsilon separated instance is built for staging, Haproxy rules and certificate fixes handle username.id redirects, and a Python 3.6 reproducer is created to test flows. Migration uncovers many unreported apps, two projects ask for help, and several apps get rewritten; separation work takes about two months. Replacement work is underway using Keycloak or IPA Tura and aims to eliminate the brittle single‑tech Epsilon stack.
AI-written summary · about
chapters (12)
- 0:00End of OpenID in Fedora
- 1:07Talk overview
- 3:12What OpenID is
- 4:44Reasons for replacement
- 6:13Migration plan challenges
- 9:49Separating OpenID instance
- 13:26Community progress struggles
- 16:46HTTP proxy and certificates
- 18:14Final migration and EOL
- 19:18Current situation and plans
- 20:46New OIDC services
- 23:15Q&A
related talks
54mState of authentication and identity in Fedora
22mThe Future of Identity (Keystone)
26mMigrating a Linux environment to IDM
01h 12mIdentity 2.0: the what, why and how of social and federated login
15mEvolution of UAA Towards OAuth 2.1 and OpenID Foundation
28mIdentity: From Legacy to Microservices
37mOpenID Foundation Strategy
27mFrom AuthN to AuthZ: The Future of Identity