Hi all,
I’ve inherited hosting responsibility for our forum and it appears to have been previously configured with Discourse Connect. I don’t understand this configuration and reading what docs I could find has not enlightened me yet.
I’m unclear if it’s just vestigial configuration (if so I’d like to clean it up) or if somehow the forum is both a client and a server of DiscourseConnect’s authentication? Until I understand it better I’m to spooked to change anything because I don’t want to loose access. The post about DiscourseConnect includes this titbit about transitioning from single sign on.
If I’m reading this right then when I disable DiscourseConnect I will be causing every user to have to reset their password?
I’m going to share as much of my configuration as I feel safe sharing to try and provide context. I think… that maybe DiscourseConnect is somehow setup as both the provider and the client of the authentication flow and that’s confusing to me.
If anyone is willing/able to help me get to the bottom of this I’d really appreciate the help. I’m hesitant to dump a bunch of logs in a support post but can share more information (including logs) upon request.
My goal is
- to gain more understanding of how our authentication is currently working
- make it easier for users to change emails and other account configuration as currently I have to direct them to just create a new account.
- open a path to switching the source of truth for our SSO