SSO to Joomla site

[alehman (Alan Lehman)]

Has anyone attempted SSO to a Joomla site. My club has an existing Joomla site with a member database and I would like to authenticate Discourse users to that site. I’m having trouble implementing SSO on the Joomla side. I’m looking at the miniOrange SAML plugin but can’t figure out how to connect Discourse to it. Am I headed down the right path with this?
Thanks,
Alan

[alehman (Alan Lehman)]

Does anyone know what SSO protocol Discourse uses? I saw a post that eluded to CAS. Trying to find a Joomla plugin that will work with it.
Thanks

[Remah (Just another happy Discourse user)]

I’m not sure why you haven’t got a response here. Unless others are waiting for you to do some simple searches on this site. Anyway, I hope this helps as I’m no expert on SSO.

SSO or SAML connection will be by setting an SSO/target URL at Discourse.

Have you read these topics on Discourse and off-site SSO?

Setup DiscourseConnect - Official Single-Sign-On for Discourse (sso)

DiscourseConnect is a core Discourse feature that allows you to configure “Single Sign-On (SSO)” to completely outsource all user registration and login from Discourse to another site. Offered to our standard, business and enterprise hosting customers. (Feb 2021) ‘Discourse SSO’ is now ‘DiscourseConnect’. If you are running an old version of Discourse, the settings below will be named sso_... rather than discourse_connect_... The Problem Many sites wishing to integrat…

Debug and fixing common DiscourseConnect issues

As the administrator of a forum that is using DiscourseConnect, you may occasionally get reports from users that when they attempt to login to the forum, they are greeted by an error message. For example: “There is a problem with your account. Please contact the site’s administrator.” [20%20AM] Enabling verbose discourse connect logging To debug the issue, the first thing you need to do is to enable the ‘verbose discourse connect logging’ Site Setting on Discourse. If this setting was previou…

Did you find the SAML plug-in?
https://meta.discourse.org/t/adding-saml-sso-as-an-option-but-not-enforced/47035?u=remah

And here’s a comment about preferring SAML over CAS. Interestingly enough, by the author of this software to help with CAS to Discourse:
https://meta.discourse.org/t/cas-auth-via-the-sso-api/23381/9?u=remah

Much like the comment above. Note that has useful explanations unrelated to Ruby on Rails:

CAS vs. SAML vs. OAuth2

[Stephen]

There haven’t been any replies because this isn’t really a Discourse question to begin with.

OP wants their Joomla site to be authoritative for identity, and as you’ve already linked Discourse can make use of a wide range of sign-in standards. The missing link here is a Joomla component to act as the source of identity and sign in based on one of those standards.

[alehman (Alan Lehman)]

Thanks Remah. I had read through the “Officail Single-Sign-On” thread and it helped me understand the Discourse side of it to some degree. But I couldn’t see that it said which SSO protocol I should be using on the Joomla side.

Thanks for the stackoverflow link. That helps fill in some gaps for me.

I was hoping someone here has already done what I need and might be able to explain in a few sentences the best way to accomplish this integration on both sides.

[alehman (Alan Lehman)]

Thanks Stephen. Yes, I realize this isn’t strictly a Discourse question. I’m sorry if that oversteps the bounds of this forum and I do realize that mostly developers hang out here. Is there another venue that would be better for end-user / installation type questions?

[Stephen]

You could try asking the Joomla Community