Files
opencloud/services/idp
Ralf Haferkamp 7a4bc71e65 Revert "idp/proxy: Match users by ID instead of name by default"
This reverts commit 52951b42b0.

The change broke authentication for at least the desktop client when
using the builtin idp. There seem to be issues in the IDP (lico) which
result in the implicit scoped not being added correctly in some case.
When that scope is missing the `lg.uuid` claim will not be present in
the userinfo and we can correctly match users by id.

This reverts back to the old behaviour of matching users by name. Which
also brings some aspects of https://github.com/owncloud/ocis/issues/904

Fixes #6415
2023-06-01 11:13:47 +02:00
..
2022-06-27 14:05:36 +02:00
2022-09-15 13:39:26 +02:00
2022-06-27 14:05:36 +02:00
2022-06-27 14:05:36 +02:00
2022-10-25 11:12:51 +02:00
2023-04-27 16:40:08 +02:00
2022-07-04 14:38:59 +02:00

IDP

This service provides a builtin minimal OpenID Connect provider based on LibreGraph Connect (lico) for ocis.

It is mainly targeted at smaller installations. For larger setups it is recommended to replace IDP with an external OpenID Connect Provider.

By default, it is configured to use the ocis IDM service as its LDAP backend for looking up and authenticating users. Other backends like an external LDAP server can be configured via a set of enviroment variables.

Note that translations provided by the IDP service are not maintained via ownCloud but part of the embedded LibreGraph Connect Identifier package.