OpenID Integration

[Salvatore Ansani]

Hi all!
I got a strange issue integration my iTop (3.2.2) with Microsoft Graph, using the "OpenID Authentication" extension (1.3.0). I deployed the extension from the Hub, configured the 'MicrosoftGraph' vales in the config-itop.php file but I don't see the specific button in the login form.
It's a fresh installation, no other extension, no customizations, nothing.
The error.log file is absolutely clean.

Suggestions?

Thank you,
Salvatore

[Jeffrey Bostoen]

In your iTop configuration file: find "allowed_login_types". What is it set to?

[Salvatore Ansani]

Hi!
The value is the default one:

    'allowed_login_types' => 'form|external|basic|token',

[Jeffrey Bostoen]

If I'm not mistaken, you need to add "hybrid-XXX" in there - where XXX is the name of your provider (e.g. hybrid-Google ) that matches the provider configured under the combodo-hybridauth configuration block.

[Salvatore Ansani]

Hi Jeffrey!
Thank you for your reply. I tested the suggested configuration but the SSO is still not working. I did a trace from the source code and I noticed that the login_sso_block is never triggered :(

S

[Jeffrey Bostoen]

So what did you set allowed_login_types to now?

[Salvatore Ansani]

I tried 'allowed_login_types' => 'form|external|basic|token' (the one is currently running) and 'allowed_login_types' => 'hybrid-MicrosoftGraph|form|external|basic|token' without success.

S

[Jeffrey Bostoen]

Can you share the non-sensitive bits of the Microsoft Graph configuration in the iTop configuration file?

[Salvatore Ansani]

Sure!
This is my piece of conf:

    'combodo-hybridauth' => array (
            'debug' => true,
            'synchronize_user' => false,
            'synchronize_contact' => false,
            'default_organization' => '',
            'default_profile' => 'Portal User',
            'providers' => array (
              'Google' => 
              array (
                'enabled' => true,
                'keys' =>
                array ( 
                  'id' => 'your-google-client-id',
                  'secret' => 'your-google-client-secret',
                ),
              ),
              'Twitter' =>
              array (
                'enabled' => true,
                'keys' => 
                array (
                  'key' => '...',
                  'secret' => '...',
                ),
              ),
              'Facebook' =>
              array (
                'enabled' => true,
                'keys' =>
                array (
                  'id' => '...',
                  'secret' => '...',
                ),
              ),
              'MicrosoftGraph' =>
              array (
                'enabled' => true,
                'keys' =>
                array (
                  'id' => 'MY_ID',
                  'secret' => 'MY_SECRET',
                ),
              ),
            ),
    ),

[Jeffrey Bostoen]

This would be more correct already:

'allowed_login_types' => 'hybrid-MicrosoftGraph|form|external|basic|token' 

The conf was already present in iTop? (Just trying to figure out if you have indeed properly installed the extension, also check if there is a folder "combodo-hybrid-auth" (or something similar) under the "env-production" folder in iTop?

No other custom login extensions?