Hi, iam hosting discourse on my server. For SSO i use Keycloak in combination with discourse-sso-oidc-bridge. User creation, role assignment and all other features are working except the add_groups, groups and remove_groups values. The users will not be added to the defined groups, but with activated sso overrides groups the user will be removed from all other groups. I´ve created the groups in discourse before i logged in over SSO. I seems that discourse gets all required parameters (see below): Verbose SSO log Verbose SSO log: User was logged on tiloullrich add_groups: admin: true moderator: avatar_force_update: avatar_url: bio: card_background_url: email: test@exapmle-mail.de external_id: 7d7d5c3c-1854-46d6-8c54-a4f45626ea58 groups: [‘exampleGroup’, ‘test’] locale: locale_force_update: logout: name: Example User nonce: a69b0ff2c31058318351e9274fea4d42 profile_background_url: remove_groups: require_activation: return_sso_url: /session/sso_login suppress_welcome_message: title: username: exampleuser website: location:

yes i created this groups in Discourse. The names are equal.

Its also very interesting that if the testUser is a member of the group exampleGroup in Discourse he will be removed from this group after the login (In groups variable the exampleGroup is available in this time). It seems that Discourse ignores the defined groups in variable groups. Is there any criteria for the names of the groups?

SSO groups not added to User

Product Support SSO

pfaffman (Jay Pfaffman) April 28, 2020, 5:22pm 2

Do the exampleGroup and test groups exist with those names?

Topic		Replies	Views
SSO groups without completely overriding Product Support	9	1781	January 8, 2021
Add new groups via sso SSO groups	2	916	November 19, 2019
SSO and Restricted Groups SSO	2	3046	March 1, 2017
SSO with Roles translating to Groups Feature	2	1588	February 10, 2020
Updating SSO documentation SSO	8	4023	September 3, 2019

SSO groups not added to User

Related topics