Hi everyone, I’m new with Discourse and I’m trying to use it with Keycloak. But I’m not being able to set keycloak as SSO to Discourse. What I need is: the user is authenticated on my site, through keycloak, and when try to access my Discourse instance he already be authenticated. Could someone help me ?

Could you provide some more info about your setup please? Did you follow the sso guide? What settings did you add to keycloak? Are requests making it to Discourse?

I tried to follow the sso guide, but I got confused. On Discouse I configured the OAuth2 plugin and my sso configuration is: enable sso: is checked sso url: http://mykeycloakdomain/auth/realms/myrealm/protocol/openid-connect/auth?response_type=code&scope=openid&client_id=myclientid&redirect_uri=http//mydiscoursedomain/session/sso_login sso secret: this_is_my_secret On Keycloak I just put this url (http://mydiscoursedomain/session/sso_login) on my client Valid Redirect URIs field. When I login on Keycloak and it try to rediret to http://mydiscoursedomain/session/sso_login, the url redirect is http://mydiscoursedomain/session/sso_login?code=somecode and it gives me HTTP ERROR 500

OAuth2 plugin is an auth strategy (like Facebook, Twitter, etc) while SSO is another thing. You want one or another. You can’t use both.

I disable OAuth2 plugin, even so when Keycloak redirect to http://mydiscoursedomain/session/sso_login I get an erro 500 and the url came as http://mydiscoursedomain/session/sso_login?code=qEv3eXual_dkdMteGxeouUu0ih8Q8IGfSg-O__nMYgg.eac438e7-886d-459e-830e-857ef244a0ed Keycloak did not return the params sso=payload and sig=sig as expected for Discourse. This maybe has something to do with sso version ? Or do I need to configure something else on Keycloak ? My Keycloak instance version is 3.1.0.Final

There is a post where a user managed to get KeyCloak and the OAuth2 plugin to work together But this is not Discourse SSO, you should disable SSO and use only the OAuth2 plugin in this case.

Actually I was able to make OAuth2 work with Keycloak. But when I do this even if the user is authenticated on my site, when they go to my Discourse instance he needs to click on “Log in” button to get access to the information on the forum. That is why I was tring to make SSO work with Keycloak, doing so I espect that if the user is already authenticated on my site he was able to access my Discourse instance without need to log in or click on “log in” button on Discourse home.

Actually, you can get this behavior on both OAuth2 and SSO, by checking the login_required setting. However, this will prevent anonymous reading and search engines from listing your site.

So I’m missing some configuration, because if I enable the OAuth2 with Keycloak, authenticate myself on Keycloak and an another tab try to access my Discourse intance I’m redirect to Discourse login page and need to click on “Log In” (blue button) to Discourse verify with Keycloak that I’m already authenticated. I really don’t want that anonymous users be able to read my Discourse instance.

[תמונה] maisa: I really don’t want that anonymous users be able to read my Discourse instance. Did you check the login_required setting on Discourse?

Yes, but is still necessary to click on “Log in” button to access Discourse, even I’m already authenticated on my site. There is no way to be authenticated on my site and when I access my Discourse instance I accesses it without the need to click on “Log in” button ?

Keycloak with Discourse

Product Support SSO

mahcr (Mariano Alvarez) 23 בינואר,‏ 2021,‏ 7:30am 20

Did anyone find a solution? I’m been trying to set up SSO with keycloak but no luck

נושא		תגובות	צפיות
Intergrate Discourse with keycloak SSO	15	5079	9 בנובמבר,‏ 2024
Discourse with Keycloak for SSO Development	7	5568	10 במרץ,‏ 2022
Oauth2 keycloak setup? Product Support	0	481	12 בספטמבר,‏ 2020
Discourse, Keycloak, SAML - is it impossible to configure? SSO	7	5081	16 במרץ,‏ 2021
OpenID Connect extension not creating new Discourse users Product Support	19	4992	12 בינואר,‏ 2019

Keycloak with Discourse

נושאים קשורים