OIDC Documentation

[tbelway]

Seems like there's no documentation on OIDC configuration and the particular nuances.

Perhaps we need an OIDC.md in the docs? I can put in a PR if you want me to mock one up real quick.

Example:

OIDC

Keycloak

ALLOW_EMAIL_PASSWORD_REGISTRATION=false # optional, default is true
OIDC_AUTO_REGISTER=false
OIDC_CLIENT_ID=${CLIENT_ID}
OIDC_CLIENT_SECRET=${CLIENT_SECRET}
OIDC_ISSUER=https://${KEYCLOAK_FQDN}/realms/${REALM} # Note there is no trailing "/"
OIDC_REDIRECT_URI=https://${DAWARICH_FQDN}/users/auth/openid_connect/callback
OIDC_PROVIDER_NAME=${SSO_NAME} # optional, default is OpenID Connect

Ex.
ALLOW_EMAIL_PASSWORD_REGISTRATION=false # optional, default is true
OIDC_AUTO_REGISTER=false
OIDC_CLIENT_ID=client_id_example
OIDC_CLIENT_SECRET=client_secret_example
OIDC_ISSUER=https://keycloak.yourdomain.com/realms/myrealm
OIDC_REDIRECT_URI=https://your-dawarich-url.com/users/auth/openid_connect/callback
OIDC_PROVIDER_NAME=YourProviderName # optional, default is OpenID Connect

Authentik

ALLOW_EMAIL_PASSWORD_REGISTRATION=false # optional, default is true
OIDC_AUTO_REGISTER=true # optional, default is false
OIDC_CLIENT_ID=${CLIENT_ID}
OIDC_CLIENT_SECRET=${CLIENT_SECRET}
OIDC_ISSUER=https://${AUTHENTIK_FQDN}/application/o/dawarich/
OIDC_REDIRECT_URI=https://${DAWARICH_FQDN}/users/auth/openid_connect/callback
OIDC_PROVIDER_NAME=YourProviderName # optional, default is OpenID Connect

Ex.
ALLOW_EMAIL_PASSWORD_REGISTRATION=false # optional, default is true
OIDC_AUTO_REGISTER=true # optional, default is false
OIDC_CLIENT_ID=client_id_example
OIDC_CLIENT_SECRET=client_secret_example
OIDC_ISSUER=https://authentik.yourdomain.com/application/o/dawarich/
OIDC_REDIRECT_URI=https://your-dawarich-url.com/users/auth/openid_connect/callback
OIDC_PROVIDER_NAME=YourProviderName # optional, default is OpenID Connect

[Freika]

We have a community guide, please feel free to post your additions to the topic: https://discourse.dawarich.app/t/how-to-set-up-authelia-oidc-integration/39