Hi Team, I am using discourse in our organization and have a requirement to enable SSO using Azure AD. is there a guide on how I can enable single sign-on using Azure AD? Also, I have one more requirement, normally in discourse if I use username password-based authentication, then users can register and create their account on the forum but in the case of Azure AD SSO, how the profiles will be created automatically while login and it will be mapped to a particular group based on some Azure AD group? Is there a way I can create the user account in the forum automatically while login in to the forum using Azure AD SSO and automatically map the user with some group based on Azure AD Group name? Regards, Sundaram

Any help on this is much appreciated.

[图片] Sundaram_Das: is there a guide on how I can enable single sign-on using Azure AD? A number of people have seen success with the OpenID Connect plugin. There is a short section about Azure AD at the bottom of the first post here: [图片] Discourse OpenID Connect (OIDC) Plugin discourse2 Summary Discourse OpenID Connect allows an OpenID Connect provider to be used as an authentication provider for Discourse. open_book Install Guide This plugin is bundled with Discourse core. There is no need to install the plugin separately. Features The plugin aims to provide a minimal implementation of the specification. Specifically, it supports the “Authorization Code Flow”. To get started, follow the plugin installation instructions, or contact your hosti… [图片] Sundaram_Das: if I use username password-based authentication, then users can register and create their account on the forum but in the case of Azure AD SSO, how the profiles will be created automatically while login By default, people will click “Login” in Discourse, be directed to Azure. When they return to Discourse they will be shown the signup form (which is the same as the regular signup form, minus the password field). There are various site settings you can use to control the signup behaviour. [图片] Sundaram_Das: will be mapped to a particular group based on some Azure AD group Group synchronisation isn’t supported at the moment. You might be able to achieve something by building an integration with the Discourse API.

Thank you for your response this really helps.

Is there anything we have a plan down the line for this type of requirement?

For the group sync? We don’t have any specific plans for Azure, or OpenID Connect. However we are working on a general framework, which may open the door to adding Azure support in future. The technical details can be found here: [图片] Managing group membership via authentication Development @david Continuing the discussion from As you probably can guess, I’m also keen to see a stable solution to this problem, which is not specific to the openid-connect plugin. Let’s see if we can figure out a way forward To pick up on the point you’ve raised. How do you decide which groups to add and remove the user from? And how does that affect manually adding/removing users from groups in Discourse itself? a user authenticates via OIDC with groups ['group1', 'group2'] In the discourse UI…

Azure AD 身份验证和用户帐户创建

产品支持

david (David Taylor) 2021 年8 月 10 日 12:29 6

关于群组同步？我们目前没有针对 Azure 或 OpenID Connect 的具体计划。不过，我们正在开发一个通用框架，这可能会为未来添加 Azure 支持打开大门。技术细节请参见：

话题		回复	浏览量
AAD integration with Discourse Product Support	1	1498	2021 年7 月 14 日
Native SSO with Azure AD SSO	3	3184	2019 年3 月 26 日
Using Discourse as SSO for desktop app SSO	0	1602	2019 年12 月 18 日
Azure B2C SSO to Discourse? SSO	2	809	2024 年2 月 28 日
Not able to logged in using discourse-azure-ad auth plugin Product Support	1	947	2019 年1 月 23 日

Azure AD 身份验证和用户帐户创建

相关话题