admin icon indicating copy to clipboard operation
admin copied to clipboard

Storing the Zoom credentials

Open brianwarner opened this issue 2 years ago • 7 comments

LF just switched from LastPass to 1password, and while we've gained many things in the process, I'm told that credential sharing outside of the LF org is limited to 30 days at a time. Apparently this is currently the max supported by 1password.

The Node.js Zoom account is shared out to many people in the project, so it's not exactly a state secret. Is there a central place for the project to keep the credentials so they can be directly shared when you add a new meeting chair?

brianwarner avatar May 09 '22 15:05 brianwarner

Do we (or whatever "LF" is) have a 1Password org? If so, people can be added to the org and then there is no 30-day limit.

Ex OpenJS org

  • Node.js vault

Add Node.js collaborators to the OpenJS org and grant them access to the Node.js vault.

JakobJingleheimer avatar May 10 '22 17:05 JakobJingleheimer

or whatever "LF" is

Linux Foundation

Trott avatar May 10 '22 17:05 Trott

@rginn do you know if the suggestion of adding people to the LF org work?

mhdawson avatar Jun 28 '22 17:06 mhdawson

@mhdawson @JakobJingleheimer Unfortunately we can't add non-LF email accounts to the LF 1Password Org. We can however apply for a 1Password org for our open source projects. Additionally we can continue to use the Lastpass account for the time being. If there are lots of accounts for which the TSC wants to share and manage creds then I think getting a 1Password org might be the way to go.

jorydotcom avatar Jun 29 '22 20:06 jorydotcom

Getting a 1Password org for the Node.js project would likely make sense. Is that something that it would make sense for the Foundation to get/setup/have backup access for or would the expectation be that we do that on our own?

mhdawson avatar Jun 29 '22 21:06 mhdawson

Unless you have other passwords you need to share, it's probably oversolving a bit to use 1Password just for this. It's a great tool, but if you don't need to share any other credentials it's going to be easiest to keep the credentials locally and just send them to the new person via email.

brianwarner avatar Jun 29 '22 21:06 brianwarner

I think we'll have a number of credentials that could be shared this way.

mhdawson avatar Jun 30 '22 15:06 mhdawson

The password is now shared in 1Password and I've done that for new people added. I'm going to close this.

mhdawson avatar Nov 22 '22 16:11 mhdawson