Sur d’autres sites (10925)

• Berlin website owners need consent for using Google Analytics

  19 novembre 2019, par Joselyn Khor — Uncategorized

  Website owners in Berlin need consent for using Google Analytics

  According to the Berlin Data Protection Office, if you’re a website owner collecting and sending data to third-party services (like Google Analytics) who are also using that data “for own purpose uses” in Berlin, you are now required to ask for specific consent from visitors in order to collect that information. 

  This means you can only use Google Analytics or similar services once you’ve gotten consent from visitors. In contrast, Matomo does not use information from Cloud or On-Premise users for “own purpose uses”.

  Consent is also needed when keystrokes or mouse movements are recorded. That means you need users to consent to your usage of features like Heatmaps and Session Recordings.

  It’s advised that website owners in Berlin should check their websites for third-party content and tracking mechanisms. If you do use these third-party functions that require consent, you must either get consent or remove the functions. Consent is only effective if the visitor (whose data you’re collecting) is informed and agrees to their data being processed.

  Currently this applies to website owners in Berlin, and should likely be applied for the whole of Germany to be on the safe side.

  Further reading :

  • Learn more about Matomo’s Cloud Data Processing Agreement
  • Read about asking for consent in Matomo
  • To use Matomo Analytics and be compliant with the regulation we recommend you learn how to make Matomo GDPR compliant in 12 steps.

  And learn more about all the features in our GDPR user guide and privacy user guide. You can also learn more about GDPR through our blog posts.

• Gestion du multilinguisme

  22 avril 2010

  Ce ticket a pour but de lister les taches nécessaires afin de rendre mediaspip aisément multilingue.

  Il semble préférable d’adopter un multilinguisme non structuré puisqu’il semble peu probable que les utilisateurs soient capables d’avoir une copie conforme de leur mediaspip en plusieurs langue à part s’ils sont de grosses organisations ce qui n’est pas trop le but

  Au niveau général

  • L’administrateur doit pouvoir ajouter facilement la prise en compte d’une nouvelle langue via un formulaire de configuration accessible [fait]
  • activer la globale $forcer_lang pour que la langue soit transmise correctement dans l’environnement partout [fait]
  • Modifier la meta "langues_proposées" avec les langues compatibles avec mediaspip plutôt que l’ensemble des langues de SPIP, il est également obligatoire de surcharger le fichier inc/lang_liste.php [fait]

  Pour les articles et les médias

  Les articles dans SPIP sont des objets traduisibles par duplication. Chaque article peut donc facilement avoir sa version dans chaque langue et on peut alors appliquer ce type de méthode pour le multilinguisme :
  http://www.spip-contrib.net/Multili...

  Il suffit donc de modifier :

  • Les boucles du site pour qu’elle affichent la version dans la langue en cours ou la version par défaut si nécessaire
  • Diogène et ses squelettes pour qu’ils permettent de créer des traductions des medias et des articles [fait pour les articles]

  Mediaspip à son installation active automatiquement [Fait] :

  • le menu de langue sur les articles ($GLOBALS['meta']['multi_articles'] == 'oui')
  • la gestion des liens de traduction ($GLOBALS['meta']['gerer_trad'] == 'oui')

  Mediaspip propose dans sa configuration :

  • Le choix des langues disponibles sur le site

  Pour les rubriques et les sites

  Les rubriques et les sites quant à eux ne sont pas traduisible par duplication et le type de multilinguisme décidé plus haut ne servirait pas à grand chose pour les rubriques au moins.

  Nous allons donc utiliser pour ces objets les balises multi : http://www.spip.net/fr_article2124....

  Pour ce faire il va falloir :

  • Expliquer clairement le fonctionnement
  • Utiliser si javascript activé coté client le plugin "multilang" permettant de traiter facilement ces cas
  • Installer à l’initialisation du mediaspip une configuration pour multilang (même si pas forcément utilisé) afin qu’il soit utilisable dès son activation [Fait]

  Tout commentaire pertinent à ce ticket pourra y être ajouté par la suite

• Piwik SSO options and why is it useful ?

  8 novembre 2017, par Piwik Core Team — Plugins

  Bored with typing again and again different logins and passwords for each service you have access to ? Would you like to add hundreds or thousands of users with different roles to your Piwik at once ? Would you like to save time and effort of managing your users while increasing the security in your business ? Guess what, Piwik has come up with great features to do just that.

  But what is a SSO ?

  Before introducing you to new Piwik features, let me explain what a SSO is.
  SSO is the acronym for Single Sign On. As its name suggests this authentication process allows a user to access multiple applications with one set of login credentials.

  Advantages of using a SSO are numerous :

  • improving security, for example when an employee is leaving your company, how can you check that all his credentials have been removed ?
  • reducing employees time-wasters such as having to enter logins/passwords each time.
  • providing a centralized database for administrators. They can then easily manage permissions of all employees saving them heaps of time.
  • reduces support costs related to authentication / accounts management.

  In order to provide SSO options, two Piwik plugins have been developed and are available on the marketplace :

  • SAML
  • LDAP

  SAML

  

  SAML stands for “Security Assertion Markup Language”, it is a standard in order to exchange authentication and authorization between an identity provider (OneLogin, Okta, Ping Identity, ADFS, Google, Salesforce, SharePoint…) and a service provider.
  An identity provider is an online service that authenticates users on the Internet by using security tokens.

  Are you wondering if your business or organization is using any of these providers ? We recommend to ask your operations team or sysadmin.

  At InnoCraft, we developed a plugin in order to allow SSO with SAML for Piwik. It can ensure consistent access control across the enterprise and external providers, potentially reducing support costs related to authentication and accounts management.

  The installation process is straightforward. All you need is to get the SAML premium feature from the marketplace. Once installed, you will access the SAML configuration interface through the admin where you can configure various settings :

  • SAML Status
  • Identity Provider (Entity ID, SSO endpoint info, Public x509 certificate)
  • Just-in-time provisioning and Mapping attributes
  • Access Synchronization
  • Advanced settings

  

  From there you will need to follow our detailed documentation to have it up and running :
  https://piwik.org/docs/login-saml/.
  Once finished, you will then be able to use SAML to authenticate to your Piwik account :

  

  As all premium features, SAML is eligible to a 30-day period money back guarantee, so do not hesitate to have it a try.

  LDAP

  

  LDAP stands for Lightweight Directory Access Protocol. As its names implies LDAP is a directory, hosted on a server, which organizes the data about people in your company.
  Thanks to the LDAP plugin, Piwik can be connected to your LDAP infrastructure and then use all its power in order to give each individual an access with different rights according to their needs.

  Let’s say that you have 1,000 employees within a company and they all need right now an access to the analytics reports in Piwik with different roles. This is what LDAP can do.

  Moreover if your business or organization is already using LDAP, we recommend using the LDAP connector for Piwik for better security, to stop wasting time of your users and sysadmins, and to reduce the costs related to account management.

  You understood it well. LDAP is a plugin which saves a LOT of time within an organization. Here is a preview of the settings part :

  

  LDAP has been developed by the Piwik core team and is available as a Free plugin on the marketplace.

  Try it now within the marketplace

  If you are surprised by the possibilities that Piwik is offering in terms of plugins, the good news is that many other plugins are waiting for you on the marketplace. Check out our premium marketplace which offers state-of-the-art plugins to get the most out of Piwik.

  And if you are a developer feel free to create your own plugin, a detailed documentation is available at : https://developer.piwik.org/guides/getting-started-part-1.