SSO Integration with ADFS 4.0 using OAuth 2 and OpenID #3184
Description
Issue
Hi having issues trying to integrate SSO for wekan using ADFS 4.0 using Oauth 2 and OpenID
using Wekan Version 4.15.0 running on a docker image. The issue I am having is by default ADFS responds only with the "sub" claim back to Wekan as seen in the token below
Wekan OAuth2 config
OAUTH2_ENABLED=true
OAUTH2_CLIENT_ID=****************
OAUTH2_SECRET=*************************
OAUTH2_SERVER_URL=https://*******
OAUTH2_AUTH_ENDPOINT=adfs/oauth2/authorize
OAUTH2_USERINFO_ENDPOINT=adfs/oauth2/userinfo
OAUTH2_TOKEN_ENDPOINT=adfs/oauth2/token
OAUTH2_ID_MAP=sub
OAUTH2_USERNAME_MAP=sub
OAUTH2_FULLNAME_MAP=commonname
OAUTH2_EMAIL_MAP=email
If I modify ADFS to send additional claims back to Wekan i can see the additional claims in the token in the wekan logs however it generates failed to fetch a userinfo from OIDC shown below
Has anyone managed to get on premise ADFS authenticating SSO requests for Wekan using OAuth2 any help or guidance would be much appreciated.
-- | --