OpenID Connect (OIDC) support

[ikedas]

Expected Behavior

The feature to easily delegate authentication to the external user stores is desirable.

Current Behavior

On WWSympa, with user_table, Sympa itself manages authentication information; for ldap , cas and generic_sso, it is necessary to deploy the authentication infrastructure for each organization.

Possible Solution

Supporting OpenID Connect (OIDC), lightweight authentication delegation mechanism.

There are some implementations for Perl :

• OIDC::Lite
• Net::OAuth2
• ...

Context

[rkarlsba]

Did anything happen for this one?

[ikedas]

I forgot to make announcement but this issue may be (in several environments) solved by the combination of cgi paragraph in auth.conf and server-side module for OIDC. See also #1496.

If no objection, I’d like to close this issue for now.

[axu-trex]

@ikedas does this method support alternative authentication methods?

I'd like to be able to let the users decide whether they want to create a profile directly on SYMPA or use an OIDC connection to create one.

[ikedas]

@axu-trex , could you please submit a separate issue? This issue itself has been solved and would be closed.