Login to Discourse with custom Oauth2 provider

[supermathie (Michael Brown)]

SSO means: “I trust «other_site» to rely on ALL of my authentication and rely on it exclusively for this purpose.”

That other site could be anything - it could be your Corporate SSO site, it could be something horrible that trusts users completely, it could be a provider that requires an RSA key with certificates, heck it could even be (another) Discourse.

oauth2 means: “This is a login option for my site” such as Google oauth2.

If what you’re trying to do is this:

then you want to do as @sam mentioned and use the plugin (possibly extending it to specifically support your OAuth2 provider.

But if what you’re trying to do is this:

Then you need to write “SSO Provider” as Discourse doesn’t care what’s behind it.

[leog (Leo Giovanetti)]

Super clear. Thanks for taking the time to include diagrams, really neat!

[david (David Taylor)]

@beanieboi

Wie kann ich die Registrierung überspringen und das Konto direkt erstellen?

@leog

Nahtlose Erfahrung für meine Kunden, aber es scheint, als gäbe es keinen Umweg. Hast du noch einen anderen Vorschlag, um dies zu erreichen?

Ich habe gerade einige neue Einstellungen hinzugefügt, die dies ermöglichen:

Automatically provision accounts with external SSO provider? (skip Create New Account prompt)

I just added some new site settings which will help with this. To skip the ‘create new account’ screen, enable sso_overrides_username, sso_overrides_email and sso_overrides_name. Then to skip the popup completely, enable external_auth_skip_create_confirm If you don’t see that option, make sure you’re on the latest version of tests-passed.