Skip to content

6432 - add release note about basic OIDC support #6442

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kcondon merged 1 commit into from
Dec 9, 2019
Merged

6432 - add release note about basic OIDC support #6442

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 16 additions & 0 deletions doc/release-notes/6432-basic-oidc-support.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
# Basic OpenID Connect support
Working on epic #5974 brought us refactored code for our OAuth 2.0 based login options.
This has now been extended to provide basic support for any OpenID Connect compliant
authentication provider.

While with our OAuth 2.0 login options you had to implement support for every provider
by pull request, OpenID Connect provides a standardized way for authentication, user
details and more. You are able to use any provider just by loading a configuration file,
without touching the codebase.
Comment on lines +6 to +9
Copy link
Member

@pdurbin pdurbin Dec 9, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Does this mean that #4334 could be addressed without a pull request? Previously pull request #4341 was made to add support for a country-specific OAuth provider but it was closed as "we want this to be a plugin outside the core code". My understanding is that @philippconzett and @oodu run a fork of Dataverse because they need support for their country-specific login. It would be great if they could stop running a fork and get the auth support they need with configuration!

Copy link
Contributor Author

@poikilotherm poikilotherm Dec 9, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks like this will be the case.
https://docs.feide.no/service_providers/integration_guide/oauth_oidc/openidconnect.html

Copy link
Contributor

@djbrooke djbrooke Dec 9, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, looks like Obi has commented on the issue and can repopen if needed.


While the usual prominent providers like Google et al feature OIDC support, there are
plenty of options to easily attach your current user storage to a custom made provider,
using enterprise grade software. See documentation for more details.

This is to be extended with support for attribute mapping, group syncing and more in
future versions of the code.