Files
opencloud/services/idp
Ralf Haferkamp 52951b42b0 idp/proxy: Match users by ID instead of name by default
Reconfigure the oidc clients for lico, so that lico adds the "lg.uuid" to
tokens and userinfo by default. That claim will contain the userid. So
we can now use the userid for matching users when using the default
idm/idp configuration. This fixes further problems so that users being
recreated with the same name are correctly treated as differnt users.

Fixes: #904
2023-05-23 09:48:47 +02:00
..
2022-06-27 14:05:36 +02:00
2022-09-15 13:39:26 +02:00
2022-10-25 11:12:51 +02:00
2023-04-27 16:40:08 +02:00
2022-07-04 14:38:59 +02:00

IDP

This service provides a builtin minimal OpenID Connect provider based on LibreGraph Connect (lico) for ocis.

It is mainly targeted at smaller installations. For larger setups it is recommended to replace IDP with an external OpenID Connect Provider.

By default, it is configured to use the ocis IDM service as its LDAP backend for looking up and authenticating users. Other backends like an external LDAP server can be configured via a set of enviroment variables.

Note that translations provided by the IDP service are not maintained via ownCloud but part of the embedded LibreGraph Connect Identifier package.