OAuth connection of discourse

[Vijay_Vantipalli]

Hi Team

For connecting my locally deployed discourse application to my internal OAuth service can I just connect it using client ID and client secret entered into the google OAuth fields in the login settings of the application?

[david (David Taylor)]

No, the google oauth2 settings will only work for connecting to google. To connect to a custom OAuth2 service, you should take a look at

OAuth2 Basic Support

The goal of the plugin is to support basic OAuth2 providers assuming they have a JSON API endpoint where user details can be retrieved by token. GitHub: https://github.com/discourse/discourse-oauth2-basic Install: Follow the plugin installation guide. Features This plugin allows you to use a basic OAuth2 provider as authentication for Discourse. It should work with many providers, with the caveat that they must provide a JSON endpoint for retrieving information about t…

Or if your IDP support OpenID Connect, this plugin will be simpler to configure:

OpenID Connect Authentication Plugin

Summary: discourse-openid-connect allows an OpenID Connect provider to be used as an authentication provider for Discourse. GitHub: https://github.com/discourse/discourse-openid-connect Install: Follow the plugin installation guide. Features The plugin aims to provide a minimal implementation of the specification. Specifically, it supports the “Authorization Code Flow”. To get started, follow the plugin installation instructions, or contact your hosting provider. Our o…

[Vijay_Vantipalli]

Hi David

What exactly is openid connect discovery document. Is it the URL of my OAuth service? My OAuth service generates a client ID and client secret once I add a URL of discourse application to it and when I select the application it will have a endpoint. Should I copy that URL into this field?

[david (David Taylor)]

If your identity service does not have an openid connect discovery document, then you will need to use the OAuth2 Basic plugin (the first link above).