Hi everyone, I’m new with Discourse and I’m trying to use it with Keycloak. But I’m not being able to set keycloak as SSO to Discourse. What I need is: the user is authenticated on my site, through keycloak, and when try to access my Discourse instance he already be authenticated. Could someone h…

Could you provide some more info about your setup please? Did you follow the sso guide? What settings did you add to keycloak? Are requests making it to Discourse?

I tried to follow the sso guide, but I got confused. On Discouse I configured the OAuth2 plugin and my sso configuration is: enable sso: is checked sso url: http://mykeycloakdomain/auth/realms/myrealm/protocol/openid-connect/auth?response_type=code&scope=openid&client_id=myclientid&redirect_uri=h…

OAuth2 plugin is an auth strategy (like Facebook, Twitter, etc) while SSO is another thing. You want one or another. You can’t use both.

I disable OAuth2 plugin, even so when Keycloak redirect to http://mydiscoursedomain/session/sso_login I get an erro 500 and the url came as http://mydiscoursedomain/session/sso_login?code=qEv3eXual_dkdMteGxeouUu0ih8Q8IGfSg-O__nMYgg.eac438e7-886d-459e-830e-857ef244a0ed Keycloak did not return the pa…

There is a post where a user managed to get KeyCloak and the OAuth2 plugin to work together But this is not Discourse SSO , you should disable SSO and use only the OAuth2 plugin in this case.

Actually I was able to make OAuth2 work with Keycloak. But when I do this even if the user is authenticated on my site, when they go to my Discourse instance he needs to click on “Log in” button to get access to the information on the forum. That is why I was tring to make SSO work with Keycloak, d…

Actually, you can get this behavior on both OAuth2 and SSO, by checking the login_required setting. However, this will prevent anonymous reading and search engines from listing your site.

So I’m missing some configuration, because if I enable the OAuth2 with Keycloak, authenticate myself on Keycloak and an another tab try to access my Discourse intance I’m redirect to Discourse login page and need to click on “Log In” (blue button) to Discourse verify with Keycloak that I’m already a…

[image] maisa: I really don’t want that anonymous users be able to read my Discourse instance. Did you check the login_required setting on Discourse?

Yes, but is still necessary to click on “Log in” button to access Discourse, even I’m already authenticated on my site. There is no way to be authenticated on my site and when I access my Discourse instance I accesses it without the need to click on “Log in” button ?

Keycloak with Discourse

Support SSO

mahcr (Mariano Alvarez) Janvier 23, 2021, 7:30 20

Quelqu’un a-t-il trouvé une solution ? J’essaie de configurer SSO avec Keycloak, mais sans succès.

Sujet		Réponses	Vues
Intergrate Discourse with keycloak SSO	15	4973	Novembre 9, 2024
Discourse with Keycloak for SSO Development	7	5512	Mars 10, 2022
Oauth2 keycloak setup? Support	0	471	Septembre 12, 2020
Discourse, Keycloak, SAML - is it impossible to configure? SSO	7	5058	Mars 16, 2021
OpenID Connect extension not creating new Discourse users Support	19	4844	Janvier 12, 2019

Keycloak with Discourse

Sujets connexes