Hello! @david help me please, great man! )))) I have successfully configured the Discourse + Keycloak SSO + SAML plugin + Openid Connect plugin bundle. There is only one thing that overshadows this beauty - it is logout. I do a logout from the forum, the user is deauthorized, this part works fine…

The OpenID Connect plugin supports RP Initiated Logout . Is that supported by keybase?

Now it remains to understand what it is and whether it is in Keycloak )))) Where is this option configured in the openid-connect plugin?

It’s configured in the site settings: [صورة] Discourse OpenID Connect (OIDC) openid connect rp initiated logout : Redirect the user to end_session_endpoint after logout. Must be supported by your identity provider and included in the discovery document.

Thanks! I’ll try to google what Keycloak has with this question.

[صورة] david: The OpenID Connect plugin supports RP Initiated Logout . Is that supported by keybase? Yes! It’s works fine! I want to clarify that it is necessary to set the openid_connect_rp_initiated_logout_redirect variable. @david I have one more question. Important question. Now I’m in …

[صورة] nahimov: After all, the user’s mail has already been confirmed when creating an account on SSO If that message is showing for OpenID Connect then it means that the identity provider passed an email_verified: false message to Discourse. If you enable the verbose debugging setting, it wi…

[صورة] david: If that message is showing for OpenID Connect then it means that the identity provider passed an email_verified: false message to Discourse. If you enable the verbose debugging setting, it will print all the authentication data to /logs for you to examine. Hopefully there is some w…

In the SAML plugin, this is controlled by the saml_default_emails_valid global setting (default true).

I found solution! )))) In Keycloak: [image] [image] Disable these options: [image]

As long as you’re 100% sure that Keycloak has verified the emails, that’s fine. If the emails aren’t verified, doing that will open up your Discourse site to attackers.

مشكلة تسجيل الدخول والخروج الموحد لـ Keycloak

دعم المنتج تسجيل الدخول الموحد

david (David Taylor) 1 فبراير 2021، 10:02ص 4

يتم تكوينه في إعدادات الموقع:

الموضوع		الردود	مرات العرض
Keycloak SSO and logout Product Support	0	766	28 يناير 2021
OpenID Connect and SSO SSO openid-connect	3	1897	7 يناير 2021
Discourse, Keycloak, SAML vs OAuth Product Support	3	1986	24 سبتمبر 2020
Keycloak with Discourse SSO	19	9266	23 يناير 2021
Intergrate Discourse with keycloak SSO	15	4994	9 نوفمبر 2024

مشكلة تسجيل الدخول والخروج الموحد لـ Keycloak

الموضوعات ذات الصلة