Discourse, Keycloak, SAML vs OAuth

[nahimov]

Hello @david!
Are there any changes since this topic?

Configure OneLogin's SAML for Discourse

Here’s how to configure Discourse to allow login and registration with OneLogin’s SAML. Configure OneLogin Create OneLogin account Go to OneLogin and create an account. Create new app: SAML Test Connector (IdP w/attr) From your dashboard create new app. [image] Search for SAML Test Connector (IdP w/attr) [image] Configure app Let’s assume that the URL of our Discourse instance is http://discourse.example.com. Let’s configure it. Switch to Configuration tab and fill out these details…

I am interested in this:

With OAuth2 Basic Plugin have one BIG problem - if the user is new to Discourse, then, after authentication, a window appears with the data of the new user.

The SAML plugin has an option DISCOURSE_SAML_AUTO_CREATE_ACCOUNT.
But what about OAuth2 plugin?

[david (David Taylor)]

Yes you can use this new setting:

Automatically provision accounts with external SSO provider? (skip Create New Account prompt)

I just added some new site settings which will help with this. To skip the ‘create new account’ screen, enable sso_overrides_username, sso_overrides_email and sso_overrides_name. Then to skip the popup completely, enable external_auth_skip_create_confirm If you don’t see that option, make sure you’re on the latest version of tests-passed.

[nahimov]

@david

Yes you can use this new setting:

Great! Thanks.
Is there any guides how to integrate Keycloak and Discourse OAuth2 plugin? Or other IDP…

[david (David Taylor)]

I would suggest starting with

Discourse OpenID Connect

Summary Discourse OpenID Connect allows an OpenID Connect provider to be used as an authentication provider for Discourse. Repository Link https://github.com/discourse/discourse-openid-connect Install Guide How to install plugins in Discourse Features The plugin aims to provide a minimal implementation of the specification. Specifically, it supports the “Authorization Code Flow”. To get started, follow the plugin installation instru…

And finding the openid discovery document URL using these instructions