Lock username to GitHub username when authenticating using GitHub
ossia proposes locking the username to the GitHub username when authenticating with GitHub to maintain consistency across multiple services. This feature would prevent users from changing their username unless it’s changed on GitHub.
sam suggests that this could be implemented as a site setting with a default of “off”, rather than being included in core.
However, ossia and cpradio discuss an existing SSO override option that doesn’t seem to be working as expected. ossia shares screenshots of their attempts to use this feature, which failed to revert their local username to their SSO username.
cpradio suggests that the issue might be due to admin or staff status, which can exclude users from certain settings. ossia confirms that non-admin users can still change their usernames, and cpradio points out that staff members are immune to these settings, requiring a regular member to test the functionality.
User story: As a new user, when I authenticate with GitHub, my username is automatically set to whatever my GitHub username is, and I cannot change it unless I change my username on GitHub.
The reason this would be helpful is that our open source community, Free Code Camp, uses GitHub authentication for our website, Gitter chat, and our Discourse. We want to maintain a consistent identity across all three of these services (plus GitHub itself) for convenience and consistency.
Even though this has been set to “0” I am still able to change my username.
Also, the SSO override option doesn’t seem to work as I understand it. I changed my username, signed out, then signed back in with GitHub and it did not revert my local username to my SSO username.
I’m not sure whether these are known issues or I’m just doing it wrong
If you were still logged in as an Admin, that could be why. Admins are excluded by most settings that disable things. You might want to try that setting and login as a normal user.
@cpradio I just confirmed that non-admin users can also change their usernames. This user (who is a mod and not currently an admin) was able to change his username last night even though the “username change period” was set to 0. So this functionality does not seem to be working currently.
