@david Continuing the discussion from https://github.com/discourse/discourse-openid-connect/pull/7#issuecomment-758082333 As you probably can guess, I’m also keen to see a stable solution to this problem, which is not specific to the openid-connect plugin. Let’s see if we can figure out a way forw…

Following this with interest — and throwing this in as related Does `sso overrides groups` work with Oauth2? For my use case, I’d be perfectly happy with the Discourse Connect behavior to be implemented for other auth providers.

Great :slight_smile: we’re getting there. [image] david: I am a little hesitant about the ‘secondary authorization’ thing, and also the provider_domain column. Can you elaborate some more on why they’re needed? Seems like they’re quite google-specific… is there a reason we can’t request the adm…

@david I’ve just pushed a few updates on this one including DistributedMutxes and in_batches in group_associated_group Acceptance tests (already had rspec) Will need some further work no doubt, but it’s currently working according to spec and all tests are passing. Take it for a test drive, let m…

Perhaps worth marking it as a non draft for now?

Hi @angus ! I’m curious if you’ve made any further progress on this? I’m very interested in the simple “strict” behavior, as I understand it, and since we control our Oauth2/OpenID connect provider, I’m not worried about the “secondary authorization” case. Any chance that something like that could la…

I’ve put aside time this weekend to work on this Matt. I’ll have an update next week, probably on the PR on github. https://github.com/discourse/discourse/pull/12446

Awesome — thank you so much. I don’t mean to nag, but Discourse Support suggested that posting in this topic would be the best way to see the current state of things. :slight_smile: I’m excited for your work on this, because there is so much we can do with the Fedora discourse sites once we have th…

Note that I’ve made an updated draft PR with a new approach (incorporating changes requested by @david on my last attempt). As mentioned in the comments to the PR, I’m looking to finish it off sometime this week. https://github.com/discourse/discourse/pull/14835

It’s a generic system, but the first supported use case will be groups in a google workspace. Once the system is in place adding support for additional providers will not be too difficult.

Managing group membership via authentication

Development

mattdm (Matthew Miller) November 8, 2021, 2:57pm 23

Just so I’m not getting myself excited for no reason — this says “google”… will it also work with non-google oauth2 sso?

Topic		Replies	Views
Memberpress: how to add users to groups upon Sign up WordPress	39	9721	January 9, 2022
Manage group membership in Discourse with WP Discourse SSO Administrators groups , wordpress , payments , how-to	77	18219	May 7, 2023
Allow moderators to add a member to a group? Feature	48	11367	December 28, 2017
Groups API - manually syncing group membership? Development rest-api	8	1778	December 13, 2022
Improved Group Members Management Feature rfc , spec	30	11495	January 7, 2016

Managing group membership via authentication

Related topics