I have a problem very similar to Avatars not pulling from SSO . While users can login with my SSO provider ( consideratio/discourse-sso-oidc-bridge ), and discourse show up information in logs about it, the provided information about the signed in user being admin or not etc is ignored. In other words…

I had multiple issues, resolving them did the trick for me. My group names needed to meet certain cirteria: must be at least %{min} characters must be no more than %{max} characters must only include numbers, letters, dashes, and underscores must be unique must be present must begin with a lett…

Suspicion 1 Discourse manages to say “User was logged on” and list “admin: true”. Am I correct to assume that when this happens, the user is meant to become an admin if the user wasn’t already? Or, does it require additional steps? I saw the following from Setup DiscourseConnect - Official Single-S…

Suspicion 2 When I inspected the logs further, I found that params listed does not contain the full sso param, but only a truncated part. What is going on here? The only information within the sso params that is truncated is nonce=01bcdfd0a32b809567991b3dbd59fe9f&return_sso_url=https%3A%2F%2Fdiscour,…

Code inspection I tried to figure something out, but I failed… Starting point - Discourse gets user information from my SSO provider I found my way here by spotting the “User was logged on” text from /logs in Discourse. app/controllers/session_controller.rb fdf4145d4 …

[图片] consideRatio: Discourse manages to say “User was logged on” and list “admin: true”. Am I correct to assume that when this happens, the user is meant to become an admin if the user wasn’t already? Yes, setting the SSO parameter admin to true should be all that’s required to log a user in …

Ah thanks for confirming that @simon ! Yepp the issue persist and I have failed to find another clue on what may be wrong. =/

Is this for a forum that we are hosting, or is it a self-hosted site?

This forum is a self hosted site, using a SSO provider I’ve written myself based on previous work of others ( GitHub - consideRatio/discourse-sso-oidc-bridge: Discourse SSO OIDC Bridge - A Python PyPI package · GitHub ).

Enable verbose SSO logs, logout, log in with a user that sends the admin flag in the payload, check logs.

No, it doesn’t. Click on the entry, then on the tabs below, and it will have every key in the payload and the respective value in a table format.

SSO 提供商实现 - 管理员、版主和组被忽略？

支持

consideRatio (Erik Sundell) 2019 年4 月 4 日 08:10 11

@falco thanks, it does only contain the kind of warning log entry about a sso request starting and another log entry indicating a successful login.

话题		回复	浏览量
SSO is forcibly creating the user as an admin Bug	12	1399	2021 年9 月 16 日
Can't make user admin, reverts when logging in Support	9	1735	2019 年5 月 30 日
I lost my admin rights due to misconfigured SSO SSO	7	818	2020 年5 月 7 日
Allow extra metadata from Single Sign On Feature	6	1392	2014 年7 月 22 日
SSO - "There is a problem with your account. Please contact the site's administrator." SSO	16	4966	2019 年3 月 18 日

SSO 提供商实现 - 管理员、版主和组被忽略？

相关话题