Can Discourse be used as an OAuth provider?

Product Support SSO
1

Can Discourse function as an oAuth provider for a system like Rocket.Chat? I’m still trying to figure out what the difference is between oAuth, SSO, and what all the terminology means. Basically, we need Discourse to host the user database, and another chat system (maybe Rocket.Chat, maybe something else) to patch into that database for authentication purposes.

Not really sure what values would need to go where on Rocket.Chat’s end for testing purposes:

temp.png1919×1053 131 KB

Apologies for my ignorance. This is all new to me. I was trying to follow some of the instructions in other threads, but wasn’t getting very far because they were addressing slightly different situations.

2

OAuth provider is a completely different thing. It’s not supported. And OAuth provider is rather complicated which takes a lot of effort to build.

3

Gotcha. Thank you very much.

4

And just to clarify, what you want to do here is entirely doable. You’d probably want to:

  • Use Discourse as an SSO provider and hook that up with Rocket.Chat’s login.
  • Enable standard OAuth login providers like Google and Facebook for Discourse logins so that users could register/login using those standard services.
5

I’m really keen to set this up also. I familiar and comfortable with setting up discourse as an SSO provider, but no idea how to get rocket.chat to use it. A little out of scope for you I know, but any idea? I’ve had a pretty good google and look through the Rocket.Chat docs, but can’t seem to find it. My guess is I just don’t quite know the right thing to be looking for.

6

Would also like rocket.chat using discourse as SSO provider.

7

Just a bump to suggest the value of using Discourse user management as a community’s single user identity hub. And the easiest, most standard way for others to tap into that is to use Discourse as an oAuth provider (IMHO).

8

BUMP

This feature would be game-changing for those wanting to federate identity across a number of Discourses - increasingly I am being asked by customers if they can have a [MyHealthTechDiscourse B] but sign in with [ThisOtherHealthTechDiscourseWhichAllOurUsersAreAlreadyOn A]

If [Discourse A] could respond to the OAuth2 login flow at standard endpoints this could be relatively straightforward to build (but probably out reach of my personal ability)

9

Discourse to Discourse SSO already works out of the box for years.

See Use Discourse as an identity provider (SSO, DiscourseConnect)

10

감사합니다만, 그것은 일종의 독자적인 SSO 플로우입니다. 표준 기반의 OAuth/OIDC 지원을 기대했는데, 그래야 다른 소프트웨어와 기본적으로 호환되고, 다른 소프트웨어가 DiscourseSSO를 소비하기 위해 커스텀 플러그인을 작성할 필요가 없으리라 생각했기 때문입니다.

11

나도 같은 생각이에요.