Login to Discourse with custom Oauth2 provider

[supermathie (Michael Brown)]

SSO means: “I trust «other_site» to rely on ALL of my authentication and rely on it exclusively for this purpose.”

That other site could be anything - it could be your Corporate SSO site, it could be something horrible that trusts users completely, it could be a provider that requires an RSA key with certificates, heck it could even be (another) Discourse.

oauth2 means: “This is a login option for my site” such as Google oauth2.

If what you’re trying to do is this:

then you want to do as @sam mentioned and use the plugin (possibly extending it to specifically support your OAuth2 provider.

But if what you’re trying to do is this:

Then you need to write “SSO Provider” as Discourse doesn’t care what’s behind it.

[leog (Leo Giovanetti)]

Super clear. Thanks for taking the time to include diagrams, really neat!

[david (David Taylor)]

@beanieboi

how can i skip the registration and directly create the account?

@leog

seamless experience for my customers but seems like there is no way around it. Any other suggestion to accomplish this?

I just added some new settings which makes this possible:

Automatically provision accounts with external SSO provider? (skip Create New Account prompt)

I just added some new site settings which will help with this. To skip the ‘create new account’ screen, enable sso_overrides_username, sso_overrides_email and sso_overrides_name. Then to skip the popup completely, enable external_auth_skip_create_confirm If you don’t see that option, make sure you’re on the latest version of tests-passed.