I’ve just setup a Discourse instance and added the discourse-openid-connect to it, connecting Keycloak as the OIDC provider. After following the 3 conditions stated here with a recent update, I get the behaviour to authenticate via Keycloak, or if already logged in, clicking the “Login” button will…

New to discourse, i’ve got my SSO OAUTH2 provider setup and working. New users are seeing the prompt the first time they arrive and authenticate to discourse. How can I streamline this process and have the user automatically created. The values populated in that screen are correct, and a one time…

[Bild] Upskiller: New users are seeing the prompt the first time they arrive and authenticate to discourse. How can I streamline this process and have the user automatically created. This is not currently possible. When users first create an account, they will need to click the “Create New Ac…

I haven’t put much time into this since my post here, but I did end up getting Discourse SSO feature instead to use a bridging service I came across for OpenID-Connect, it was a python service that had a docker container, that made deploying with my docker-compose setup easier. So Keycloak provided…

I am also interrested to avoid this “Create New Account” windows when using OAuth2. Maybe an option can be added somewhere to skip it if all fields are available?

I just added some new site settings which will help with this. To skip the ‘create new account’ screen, enable sso_overrides_username, sso_overrides_email and sso_overrides_name. Then to skip the popup completely, enable external_auth_skip_create_confirm If you don’t see that option, make sure you…

external_auth_skip_create_confirm is enabled We have a problem: There is already created account test__EMAIL__ in our discourse If I login with OpenID and username: test, email: test__EMAIL__ There is New account window that ask me new username test1 and email test__EMAIL__ And there is no way …

Does your OpenID connect provider verify users emails? We can only ‘trust’ the email from OIDC if it has been verified, and the verified boolean is set correctly.

No OID Provider - Keycloak with LDAP user federation We found the way - old user can connect openid in user settings interface

[Bild] david: Then to skip the popup completely, enable external_auth_skip_create_confirm If you don’t see that option, make sure you’re on the latest version of tests-passed. @david we have 2.5.2 stable - this option is absent… Can this option be migrated to the stable branch? We need it, b…

I’m afraid not, we don’t backport new features to the stable branch. Keep an eye on releases for info on when the next stable version will be released.

Konten automatisch mit externem SSO-Anbieter bereitstellen? (Aufforderung "Neues Konto erstellen" überspringen)

Unterstützung SSO

simon 10. Februar 2020 um 22:13 3

Dies ist derzeit nicht möglich. Wenn Benutzer erstmals ein Konto erstellen, müssen sie auf der Anmeldemaske auf die Schaltfläche „Neues Konto erstellen

Thema		Antworten	Aufrufe
Discourse, Keycloak, SAML vs OAuth Support	3	1897	24. September 2020
Auto-provisioning user accounts when SSO is enabled Integrations sso , how-to	0	57	3. April 2026
Bypass the account creation modal when using OAuth2 Support	14	1916	23. März 2022
Skip Welcome Form after keyclock authentication SSO	0	366	28. November 2022
Creating Discourse accounts via SSO without visiting the forum URL? SSO	1	2099	13. Februar 2020

Konten automatisch mit externem SSO-Anbieter bereitstellen? (Aufforderung "Neues Konto erstellen" überspringen)

Verwandte Themen