Bypass /login completely when only one OAuth method?

[theopen-institute (Peter G)]

I’m trying to create an SSO-like experience using OAuth and the oauth2-basic plugin. Specifically, on a site that is both login required and without enable local logins, I’d like to force users directly to authentication without first routing them to discourse.example.com/login. Is this possible?

I’ve seen some discussion of it here:

SSO vs Oauth2 difference?

Yeah if there is only one way to login we bypass a screen so you don’t have to “click” and then “click” when logging in. Our default https://github.com/discourse/discourse-oauth2-basic supports a lot of stuff, but is not as rich as SSO. So it depends on how much information you want to drive from oAuth2. If basic is not good enough you will need to build another custom plugin to fish out the rest of the fields or do a PR to our official basic plugin.

And this thread seems to suggest that it’s possible:

Silent login/signup via Auth0

Hi I am trying to achieve SSO for the following scenario. My application authenticates users agains auth0. Once authenticated, whenever the user visits the discourse page, I expect the user to be logged in silently without having to re-enter credentials (using the credentials from the initial login to my application). Has anyone tackled this scenario? Currently i have an Auth0 rule that upon authentication re-directs to discourse via the /sso/ path, passing the sso credentials from Auth0. Th…

…but despite playing with configurations for a while my unauthenticated users are still routed to /login.

Any tips? Many thanks in advance.

[david (David Taylor)]

It’s on the to-do list, but we haven’t got to it quite yet

SSO vs Oauth2 difference?

I definitely want to get this improved but it is not slotted quite yet. @david do you want to take this TODO? Not urgent but some time in the next 6 months.

[theopen-institute (Peter G)]

Great, thanks so much for clarifying.