Building a multi factor SSO for a whole country with Django
summary
Uruguay builds a national multi‑factor SSO with Django, Django REST Framework, OpenID Connect, React frontends, Celery, Docker and OpenShift, integrating the national eID for digital signatures and running on a government cloud. The system serves 350,000 users (~10% of the country) with ~33% certified accounts and sustains sharp traffic spikes. Authentication uses a stateless multi-factor flow with signed tokens to track challenge progression, backed by threat modeling, CI/static analysis, deployment templates, and third‑party penetration testing, and it is running in production.
AI-written summary · about
chapters (8)
- 0:00Introduction and context
- 2:27Project goals and challenges
- 8:09Design and requirements
- 12:55Technical implementation
- 15:42Security best practices
- 21:46Development and deployment
- 25:13Stateless authentication
- 29:18Takeaways and Q&A
related talks
26mDeveloping a Single Sign On Service using Django
19mImpress your enterprise customers with OpenID Connect login
44mManaging Identities: LDAP, Google Directory, and Django
26mIntegrating 2 factor authentication into your project
43mHow to 2FA-enable Open Source Applications
35mExternal authentication for Django projects
37mDjango + Keycloak: trust authentication to the professionals
51mCentrally managed Multi Factor Authentication with privacyIDEA