Hello Katie, I had a similar unexpected behavior while initially revamping the SSO plugin for the last versions of SeedDMS. On my own, this was due to my infrastructure, where both my SSO setup and my SeedDMS install were located on the same (NAT) network, with only a single public network IP available. Despite a reverse proxy behind public IP address, I finally have had to statically declare the SSO server FQDN along with it's (so "internal") IP address on the SeedDMS host itself ; thus to avoid...
Version 2.1.0 - Compatibility with other extensions
Version 2.1.0 (compatibility with other extensions)
Hello Uwe, The groups/roles sync original idea came from xwiki project where they use such kind a feature. But I needed a bit more flexibility for use with SeedDMS and wider audience, without suffering repetiting mapping's burden. That's the way I thought to solve previous point but, maybe some points can be indeed improved. So clearly yes, if on your own you did prepare some other changes too, it would be kind to merge implementations. By the way, I'm using Keycloak as SSO provider (also tested...
Small fix on ongout
small fix on logout (doc updated)
Small fix for logout
Hi, After looking more in details at SeedDMS's internal while pushing further the OIDC-Extension, it appears the proposed change at the end is no longer necessary. Indeed, SeedDMS_Core_DMS->addUser() can already accept a role object, and also has useful methods to find role by name upstream in client code. For this ticket, would so only remains to solve the small discrepancy between SeedDMS_Core_DMS->addUser's method comment and it's implementation. Clearly not a priority (bet as well as simple to...
For those interested in this topic, a new version of OIDC-Extension has been released, supporting keeping user in sync with OIDC installation, as well as mapping roles and groups.
New version 2.0.0 with more features
New version with more features
Quick fix on extension description
Update of extension description to reflect changelog
I found it using one of the external resources' links on bottom of https://www.seeddms.org/download/ page.
Meanwhile, I pushed a merge request on OIDC-Extension project to have a ready for use ext/oidc/class.oidc.php for those interested in.
Fixes for 6.0.25 + add some hints to help setup
See https://sourceforge.net/p/seeddms/discussion/general/thread/9ee1b010/
Hi, For those being stucked setting up SSO with SeedDMS, here are some configuration hints to do so. Tested with following software : * SeedDMS 6.0.25 served by Apache * Above mentionned OIDC-Extension * Keycloak 23.0.3 In context where I wanted users being automatically created in SeedDMS upon sucessful Keycloak authentication. On Apache side, use the following configuration to avoid infinite loop between Keycloak and SeedMDS: RewriteEngine on RewriteRule "/.well-known/callback" "/index.php" [L,QSA]...
By the way, regarding the last amendment mentionned around $userrole, I created a ticket regarding shadow topic behind : https://sourceforge.net/p/seeddms/tickets/560/
SeedDMS_Core_DMS->addUser() / $role argument confusion
Hi, For those being stucked setting up SSO with SeedDMS, here are some configuration hints to do so. Tested with following software : * SeedDMS 6.0.25 served by Apache * Above mentionned OIDC-Extension * Keycloak 23.0.3 In context where I wanted users being automatically created in SeedDMS upon sucessful Keycloak authentication. On Apache side, use the following configuration to avoid infinite loop between Keycloak and SeedMDS: RewriteEngine on RewriteRule "/.well-known/callback" "/index.php" [L,QSA]...