Skip to content

SSO Integration with ADFS 4.0 using OAuth 2 and OpenID #3184

Closed
@richardswekan

Description

Issue

Hi having issues trying to integrate SSO for wekan using ADFS 4.0 using Oauth 2 and OpenID
using Wekan Version 4.15.0 running on a docker image. The issue I am having is by default ADFS responds only with the "sub" claim back to Wekan as seen in the token below

image

Wekan OAuth2 config
OAUTH2_ENABLED=true
OAUTH2_CLIENT_ID=****************
OAUTH2_SECRET=*************************
OAUTH2_SERVER_URL=https://*******
OAUTH2_AUTH_ENDPOINT=adfs/oauth2/authorize
OAUTH2_USERINFO_ENDPOINT=adfs/oauth2/userinfo
OAUTH2_TOKEN_ENDPOINT=adfs/oauth2/token
OAUTH2_ID_MAP=sub
OAUTH2_USERNAME_MAP=sub
OAUTH2_FULLNAME_MAP=commonname
OAUTH2_EMAIL_MAP=email

If I modify ADFS to send additional claims back to Wekan i can see the additional claims in the token in the wekan logs however it generates failed to fetch a userinfo from OIDC shown below

image

Has anyone managed to get on premise ADFS authenticating SSO requests for Wekan using OAuth2 any help or guidance would be much appreciated.
-- | --

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions