Skip to content

Conversation

AlexBocken
Copy link

Documents OIDC setup including custom providers, built-in providers (Google, Microsoft, GitHub), and configuration examples with comprehensive setting descriptions.

Sibling PR to gramps-project/gramps-web-api#691 and gramps-project/gramps-web#763

Documents OIDC setup including custom providers, built-in providers (Google, Microsoft, GitHub), and configuration examples with comprehensive setting descriptions.
- Add OIDC_USERNAME_CLAIM and OIDC_OPENID_CONFIG_URL to base config table
- Add complete OIDC Role Mapping section documenting:
  - OIDC_ROLE_CLAIM for customizing the claim name
  - OIDC_GROUP_* variables for mapping provider groups to Gramps roles
- Add role mapping example to OIDC configuration example
- Include notes on role mapping behavior and case sensitivity
- Document OIDC Single Sign-Out (SSO logout) functionality
- Add comprehensive backchannel logout setup instructions
- Include provider-specific configuration for Keycloak and Authentik
- Explain token expiration limitations and security considerations
- Add step-by-step guide for registering backchannel logout endpoint
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant