Agreed, that publish button needs to live in thimble, but I'd still like to steer clear of ids; note that this button is *technically* a friendlycode button, which can slot into "any other website", so we can't give it an id there, it might conflict (same reason why SSO.js has a target override. If #sso would conflict for the app -unlikely, but possible- you can override the target and it should still work fine.