Concretecms and oauth2

Hey All,
I work for a small school that maintains their users of teachers and students in Azure AD. since all teachers want to be able to use some of the website feature and i want to keep all accounts managed in AD i was hoping to also use Oauth 2 as a way to log in to the website.

i found this repo made by @andrew

but im lost at where i need to implement this authorization code flow, is this a single page?
also the client id and secret, is that the one from i get from Azure AD app? Any guidance would be very much appriciated!

From a quick glance at that repo, I think this is more of a general library, one that extends an OAuth client, with the ability to authenticate against a Concrete site.

So that’s the other direction as to what you’re needing - you’re looking to authenticate against Azure AD. And that would be using OpenID (built on top of Oauth2) from Concrete.

That’s a case of developing an authentication method package for Concrete. I’ve built both OpenID and more generic Oauth2 authentication methods for V8 - both were quite fiddly to put together to be honest, in particular the OpenID one, but both are in production.

You’re welcome to reach out if you’re interested in what we already have written.

I’d like also to connect Concrete to AAD to authenticate users, but it seems there aren’t built-in available features… :frowning:

Just saw this entry, check out:

1 Like

I’d like to reopen this topic. I’m currently building an authentication-method package that lets Concrete authenticate against a Keycloak server using OpenID (on top of OAuth 2). Unfortunately, I’m stuck right now. Any help would be greatly appreciated!

I already developed a package that allows you to authenticate via a keycloak server.
But I don’t own the code: I have to ask the customer of mine what is he going to do with that package (publish it with an open source license or publish it as a paid extension).
That’s a rather powerful and complex package, which required a lot of code that can’t be explained easily in a forum post.

I read your response regarding your Keycloak authentication package for ConcreteCMS. I would be delighted if I could use this package in my project. It would save me a lot of work and hassle. :slight_smile: I understand that it’s a complex package, requiring significant work, and that its availability depends on your customer’s decision. Could you please keep me updated on when and if the package becomes available, whether through an open-source license or as a paid extension? I’m sure there are other users who would find such a package interesting as well.

Thank you for your time and effort.

Marc Schiffer

An update about this subject: the customer of mine just told me we’re going to publish the package as open source.
I’ll post here where the package will be ready.

1 Like

I’ve just submitted the package to the ConcreteCMS Marketplace: now the Peer Review Board (PRB) will review that package.
After their approval, it’ll be available on https://marketplace.concretecms.com (in the meanwhile we published it on GitHub).

1 Like