Send in your ideas. Deadline October 1, 2024
Theme fund: NGI Assure
Start: 2024-04

CryptPad Auth Improvements

Better user management, 2FA and SSO for CryptPad

CryptPad is a secure and encrypted open-source collaboration suite, allowing people to work together in real-time on presentations, texts and spreadsheets as well as conduct polls or gather data through forms. And unlike traditional cloud offerings, the server does not get to learn what its users are working on: all the data is encrypted on the devices of the users, before it is sent to the server. The project already offers advanced features like 2FA and Single Sign On (OIDC and SAML), making it easy to smoothly integrate the tool into corporate environments.

The goal of this project is to perform user interface improvements to the 2FA and SSO system. It will also build a User Directory that will allow to manage users and also list users according to information that would be available about them in case of login through SSO or Invitation. It will also build towards enabling advanced usage scenario's without SSO, instead offering for instance the possibility to send registration invitations to users in a way that doesn't break the security model of Cryptpad.

Run by XWiki SAS

Logo NLnet: abstract logo of four people seen from above Logo NGI Assure: letterlogo shaped like a tag

This project was funded through the NGI Assure Fund, a fund established by NLnet with financial support from the European Commission's Next Generation Internet programme, under the aegis of DG Communications Networks, Content and Technology under grant agreement No 957073.