Hi everyone, I’m new with Discourse and I’m trying to use it with Keycloak. But I’m not being able to set keycloak as SSO to Discourse. What I need is: the user is authenticated on my site, through keycloak, and when try to access my Discourse instance he already be authenticated. Could someone h…

Could you provide some more info about your setup please? Did you follow the sso guide? What settings did you add to keycloak? Are requests making it to Discourse?

I tried to follow the sso guide, but I got confused. On Discouse I configured the OAuth2 plugin and my sso configuration is: enable sso: is checked sso url: http://mykeycloakdomain/auth/realms/myrealm/protocol/openid-connect/auth?response_type=code&scope=openid&client_id=myclientid&redirect_uri=h…

OAuth2 plugin is an auth strategy (like Facebook, Twitter, etc) while SSO is another thing. You want one or another. You can’t use both.

I disable OAuth2 plugin, even so when Keycloak redirect to http://mydiscoursedomain/session/sso_login I get an erro 500 and the url came as http://mydiscoursedomain/session/sso_login?code=qEv3eXual_dkdMteGxeouUu0ih8Q8IGfSg-O__nMYgg.eac438e7-886d-459e-830e-857ef244a0ed Keycloak did not return the pa…

There is a post where a user managed to get KeyCloak and the OAuth2 plugin to work together But this is not Discourse SSO , you should disable SSO and use only the OAuth2 plugin in this case.

Actually I was able to make OAuth2 work with Keycloak. But when I do this even if the user is authenticated on my site, when they go to my Discourse instance he needs to click on “Log in” button to get access to the information on the forum. That is why I was tring to make SSO work with Keycloak, d…

Actually, you can get this behavior on both OAuth2 and SSO, by checking the login_required setting. However, this will prevent anonymous reading and search engines from listing your site.

So I’m missing some configuration, because if I enable the OAuth2 with Keycloak, authenticate myself on Keycloak and an another tab try to access my Discourse intance I’m redirect to Discourse login page and need to click on “Log In” (blue button) to Discourse verify with Keycloak that I’m already a…

[图片] maisa: I really don’t want that anonymous users be able to read my Discourse instance. Did you check the login_required setting on Discourse?

Yes, but is still necessary to click on “Log in” button to access Discourse, even I’m already authenticated on my site. There is no way to be authenticated on my site and when I access my Discourse instance I accesses it without the need to click on “Log in” button ?

Keycloak with Discourse

Support SSO

mahcr (Mariano Alvarez) 2021 年1 月 23 日 07:30 20

有人找到解决方案了吗？我一直在尝试用 Keycloak 配置单点登录（SSO），但一直没成功。

话题		回复	浏览量
Intergrate Discourse with keycloak SSO	15	4973	2024 年11 月 9 日
Discourse with Keycloak for SSO Development	7	5512	2022 年3 月 10 日
Oauth2 keycloak setup? Support	0	471	2020 年9 月 12 日
Discourse, Keycloak, SAML - is it impossible to configure? SSO	7	5058	2021 年3 月 16 日
OpenID Connect extension not creating new Discourse users Support	19	4844	2019 年1 月 12 日

Keycloak with Discourse

相关话题