# OpenID connect plugin

**URL:** https://meta.discourse.org/t/openid-connect-plugin/183001
**Category:** SSO
**Tags:** openid-connect
**Created:** [March 12, 2021, 12:00pm UTC](https://meta.discourse.org/t/openid-connect-plugin/183001 "2021-03-12T12:00:10Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![reynsnivea](https://avatars.discourse-cdn.com/v4/letter/r/9f8e36/32.png) [@reynsnivea](https://meta.discourse.org/u/reynsnivea)
#### Post date: [March 12, 2021, 12:00pm UTC](https://meta.discourse.org/t/openid-connect-plugin/183001/1 "2021-03-12T12:00:10Z")

</div>

Hi,

We have installed the plugin to use openID connect in discourse.  
We have configured the plugin and it seems te work.

What’s not clear to us is dat the identity provider exchanges the email addresses with us but we cannot see what exactly is done with that information?

For example, when a new user passes via the openID connect login screen, he/she is prompted with a screen to create a new user. Normally we would expect that the email address is automatically filled in with the email that we get from the identity provider. This is not the case.

Could you help us out ?

Thanks

---

<div class="post-metadata">

### Author: ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)
#### Post date: [March 12, 2021, 12:07pm UTC](https://meta.discourse.org/t/openid-connect-plugin/183001/2 "2021-03-12T12:07:21Z")

</div>

It sounds like the email address isn’t reaching Discourse correctly. Have you tried enabling the ‘verbose logging’ setting, and checking the logs for more info?

> [@Discourse OpenID Connect (OIDC)](https://meta.discourse.org/t/discourse-openid-connect-oidc/103632/1):
>
> **`openid_connect_verbose_logging`** : Log detailed openid-connect authentication information to `/logs` . Keep this disabled during normal use.

Some providers require you to add certain permissions/scopes before they will pass the email address

---

<div class="post-metadata">

### Author: ![reynsnivea](https://avatars.discourse-cdn.com/v4/letter/r/9f8e36/32.png) [@reynsnivea](https://meta.discourse.org/u/reynsnivea)
#### Post date: [March 12, 2021, 3:04pm UTC](https://meta.discourse.org/t/openid-connect-plugin/183001/3 "2021-03-12T15:04:35Z")

</div>

Hi David,

Thanks. I have enabled the logging and we will retest.

Another question. Now we have to click on “connect with openID connect” and this points us to the login page.  
Is there a way to redirect the user directly to that openID connect login page when he / she is surfing to the homepage of our forum ?  
Can I do this in the admin console ?

Thanks !

---

<div class="post-metadata">

### Author: ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)
#### Post date: [March 12, 2021, 3:38pm UTC](https://meta.discourse.org/t/openid-connect-plugin/183001/4 "2021-03-12T15:38:35Z")

</div>

> [@reynsnivea](#):
>
> Now we have to click on “connect with openID connect” and this points us to the login page.

To skip this, you should disable the ‘enable local logins’ option in the admin panel.

> [@reynsnivea](#):
>
> redirect the user directly to that openID connect login page when he / she is surfing to the homepage of our forum

If you want to force people to log in, you can turn on the `login required` setting. Then, they will be redirected to login automatically when visiting the site.

---

<div class="post-metadata">

### Author: ![reynsnivea](https://avatars.discourse-cdn.com/v4/letter/r/9f8e36/32.png) [@reynsnivea](https://meta.discourse.org/u/reynsnivea)
#### Post date: [March 15, 2021, 8:58am UTC](https://meta.discourse.org/t/openid-connect-plugin/183001/5 "2021-03-15T08:58:49Z")

</div>

Hi David,

Thanks for the support !

An additional question: can I also configure discourse so that admins have an alternative way to log in so that the admin is not locked out of the forum when the standard log in procedure fails ?

---

<div class="post-metadata">

### Author: ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)
#### Post date: [March 15, 2021, 10:12am UTC](https://meta.discourse.org/t/openid-connect-plugin/183001/6 "2021-03-15T10:12:04Z")

</div>

Admins can bypass the regular login system by heading to `/u/admin-login`
