I have a customer request with a topic I’m not really experienced with (or better: not at all^^): Is it possible to use OAuth 2.0 OpenID Connect for login to my ConcreteCms site without coding from scratch? I find a respective class/namespace at Concrete\Core\Authentication\Type\OAuth but now clue how to use it. My research in this forum and on the web tells me, that there is a method to use my ConcreteCms as a OpenID-Provider but not vice versa. Has anybody before created such a solution? I figure this should be a quite common requirement? Isn’t it? Are there better solutions for SSO with ConcreteCMS? Thanks for any help, I’m a little stuck with this topic… (can’t even decide if this topic fits to “developement” cat or rather “using…”. Please be patient with me!)
Not exactly what you are seeking, but maybe give you some ideas. In the marketplace:
Thanks for your quick reply! I already found both of them. I tried Keycloak with Google Cloud API, but didn’t get it working. It links to Google’s authentication but after that it only shows an empty dialog. I figured it to be a proprietary specification not compatible with OpenID standard. Wrong??
The other seemed to be proprietary as well (I read the keyword “microsoft”^^), but anyway I haven’t 400 bucks just for a guess…
My client has a quite specific industry application running which provides OAuth Clients and he asked me to use it for their ConcreteCms installation which serves as their intranet (which is my responsability). I foolishly suggested to him that this was possible, because I’d read in a cursory search that ConcreteCMS supports OAuth 2.0. I overlooked the fact that it apparently only works “in the other direction”…
I’m the author of the Authentication with Keycloak package, and while it was created to work with a Keycloak server, it should work with any OpenID Connect (OIDC) server.
Then I suppose there must be a mistake on my end. As I mentioned, I’m not very familiar with this topic. If you’d be so kind, I’d really appreciate it if you could take a quick look at my screenshots/Video and let me know if I’ve clearly missed something or done anything wrong.
LOGIN:
Video: Login with Keycloak
I’m having a (really needed) break these days.
When I’ll be back in front of a PC I’ll try to check if and how the package works with Google authentication services.
Great, thank you so much! No rush — enjoy your break!