Hi, iam hosting discourse on my server. For SSO i use Keycloak in combination with discourse-sso-oidc-bridge. User creation, role assignment and all other features are working except the add_groups, groups and remove_groups values. The users will not be added to the defined groups, but with activated sso overrides groups the user will be removed from all other groups. I´ve created the groups in discourse before i logged in over SSO. I seems that discourse gets all required parameters (see below): Verbose SSO log Verbose SSO log: User was logged on tiloullrich add_groups: admin: true moderator: avatar_force_update: avatar_url: bio: card_background_url: email: test@exapmle-mail.de external_id: 7d7d5c3c-1854-46d6-8c54-a4f45626ea58 groups: [‘exampleGroup’, ‘test’] locale: locale_force_update: logout: name: Example User nonce: a69b0ff2c31058318351e9274fea4d42 profile_background_url: remove_groups: require_activation: return_sso_url: /session/sso_login suppress_welcome_message: title: username: exampleuser website: location:

Do the exampleGroup and test groups exist with those names?

Its also very interesting that if the testUser is a member of the group exampleGroup in Discourse he will be removed from this group after the login (In groups variable the exampleGroup is available in this time). It seems that Discourse ignores the defined groups in variable groups. Is there any criteria for the names of the groups?

SSO groups not added to User

תמיכה SSO

ullriti (Tilo Ullrich) 28 באפריל,‏ 2020,‏ 5:26pm 3

yes i created this groups in Discourse.
The names are equal.

נושא		תגובות	צפיות
SSO groups without completely overriding Product Support	9	1782	8 בינואר,‏ 2021
Add new groups via sso SSO groups	2	917	19 בנובמבר,‏ 2019
SSO and Restricted Groups SSO	2	3046	1 במרץ,‏ 2017
SSO with Roles translating to Groups Feature	2	1590	10 בפברואר,‏ 2020
Updating SSO documentation SSO	8	4024	3 בספטמבר,‏ 2019

SSO groups not added to User

נושאים קשורים