I would like to use this feature. We’re on the Business hosted plan, so SAML is not available to us, so we’re using Oauth2 / OpenID Connect. I believe I have everything configured correctly (sso overrides groups is on, and oauth2 scope is set to openid profile email https://id.fedoraproject.org/scop…

The sso overrides groups setting does not work with OAuth2. It only works with Discourse’s implementation of SSO: Setup DiscourseConnect - Official Single-Sign-On for Discourse (sso) . We are in the process of renaming Discourse SSO to DiscourseConnect to avoid confusion around this issue.

Ouch, that’s unfortunate. The rename will definitely help reduce confusion, but doesn’t help my needs. Is this limitation intentional or it just not implemented?

[이미지] mattdm: Is this limitation intentional or it just not implemented? The setting uses a separate code path from what’s used with OAuth2 logins. Syncing groups via OAuth2 hasn’t been implemented. Being able to sync Discourse groups with groups from an external site has a lot of use cases w…

So, we have some very early potential patches for implementing groups with OAuth2: https://github.com/puiterwijk/discourse/commit/1bd570e7ef9982dfb91becf371a056066f3cfc08 https://github.com/puiterwijk/discourse-oauth2-basic/commit/a9a6bcb15d17c48404d356e6b55d77628213538e :warning: However since…

If you submit those as PRs against our repository we will review. Can’t guarantee that it will be merged, but at least a review will happen.

Awesome, thanks. Will try to get either a local test or some other kindly volunteer to actually see if they work first and remove the :warning:.

I haven’t had time to work on this (or find anyone who can…). If anyone reading this would like to help, that’d be awesome.

Once Managing group membership via authentication - #14 by mattdm is finished, we will certainly be looking at getting it working with the OAuth2 plugin :slight_smile:

I deployed the changes linked above and they didn’t seem to break discourse. Is their documentation on how to run your tests so that I can verify the changes didn’t break anything?

Nice! Breaking things aside, do they work?

`sso overrides groups`가 Oauth2와 함께 작동하나요?

제품 지원 SSO

david (David Taylor) 3월 19, 2021, 8:37오후 10

Managing group membership via authentication - #14 by mattdm 가 완료되면, OAuth2 플러그인과 함께 작동하도록 할 것입니다

글		댓글	조회수
Technical lift of migrating whitelisted discourse to SSO General	1	892	1월 12, 2022
SSO groups without completely overriding Product Support	9	1764	1월 8, 2021
OAuth2 Basic, pass user groups to Discourse SSO	0	124	8월 6, 2024
SSO vs Oauth2 difference? SSO	17	10406	11월 13, 2019
SSO groups not added to User SSO	3	1615	4월 30, 2020

`sso overrides groups`가 Oauth2와 함께 작동하나요?

Related topics