Skip to content

feat: integrate login via OIDC - #209

Merged
blizzz merged 1 commit into
nextcloud:masterfrom
univention:oidc-integration
Apr 29, 2025
Merged

feat: integrate login via OIDC#209
blizzz merged 1 commit into
nextcloud:masterfrom
univention:oidc-integration

Conversation

@spaceone

@spaceone spaceone commented Apr 23, 2025

Copy link
Copy Markdown
Contributor

Disabling the OIDC authentication can be done via:
ucr set appcenter/apps/nextcloud/disable-oidc-login=true

Setting the OIDC login identifier (displayed in the login dialog) can be achieved via:
ucr set appcenter/apps/nextcloud/oidc-identifier=UCS

Disabling the SAML authentication can be done via:
ucr set appcenter/apps/nextcloud/disable-saml-login=true

Changing these settings requires a new run of the joinscript.

Nextcloud by default doesn't permit accessing local networks, which
makes testing harder. It just says: Could not reach the OpenID Connect provider..

For testing purposes this can just be disabled via adding 'allow_local_remote_servers' => true, to /var/www/html/config/config.php.

Fixes: #204

@spaceone
spaceone force-pushed the oidc-integration branch 2 times, most recently from 0fa6af9 to 74e49fc Compare April 23, 2025 20:37
Comment thread inst Outdated
Disabling the OIDC authentication can be done via:
`ucr set appcenter/apps/nextcloud/disable-oidc-login=true`

Setting the OIDC login identifier (displayed in the login dialog) can be achieved via:
`ucr set appcenter/apps/nextcloud/oidc-identifier=UCS`

Disabling the SAML authentication can be done via:
`ucr set appcenter/apps/nextcloud/disable-saml-login=true`

Changing these settings requires a new run of the joinscript.

Nextcloud by default doesn't permit accessing local networks, which
makes testing harder. It just says: `Could not reach the OpenID Connect provider.`.

For testing purposes this can just be disabled via adding `'allow_local_remote_servers' => true,` to `/var/www/html/config/config.php`.

Fixes: nextcloud#204
Signed-off-by: Florian Best <best@univention.de>
@blizzz
blizzz merged commit 2384e40 into nextcloud:master Apr 29, 2025
@blizzz

blizzz commented Apr 29, 2025

Copy link
Copy Markdown
Member

One thing I noticed, OIDC does not seem to play along with LDAP, and administrators are not promited ot NC admins either.

And on logout we end up with having the keycloak screen with an "Invalid redirect uri" error.

I think I'd revert for now and get the release out with 30 and saml only first.

@spaceone

Copy link
Copy Markdown
Contributor Author

OK. Let's continue the discussion at #212.

@github-actions

github-actions Bot commented May 8, 2025

Copy link
Copy Markdown

Hello there,
Thank you so much for taking the time and effort to create a pull request to our Nextcloud project.

We hope that the review process is going smooth and is helpful for you. We want to ensure your pull request is reviewed to your satisfaction. If you have a moment, our community management team would very much appreciate your feedback on your experience with this PR review process.

Your feedback is valuable to us as we continuously strive to improve our community developer experience. Please take a moment to complete our short survey by clicking on the following link: https://cloud.nextcloud.com/apps/forms/s/i9Ago4EQRZ7TWxjfmeEpPkf6

Thank you for contributing to Nextcloud and we hope to hear from you soon!

(If you believe you should not receive this message, you can add yourself to the blocklist.)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Keycloak compatibility needed for UCS 5.2

2 participants