Google OAuth for OTRS

[crons]

Hi,
As any one tried authentication for customers via Google OAuth? Is it possible?

[jojo]

there is no such module for OTRS.

Try mod_auth_oauth for apache

[crons]

Thanks,
I will give a try on mod_auth_oauth for apache
From Google OAuth i am looking to validate the user/password and auto login to OTRS so that he need not re login into OTRS.
Is it possible?

[jayquala]

Where you able to get OTRS associated with Google OAuth2?

[wurzel]

Hi,

want to share the knowledge?

Flo

[puneet]

Was anyone able to successfully integrate Google OAuth with OTRS?

[root]

AFAIK there is no mod_auth_oath available. For authentication with Google you could consider mod_auth_openidc which use Google as an OpenID provider. Check out https://github.com/pingidentity/mod_auth_openidc

[puneet]

AFAIK there is no mod_auth_oath available. For authentication with Google you could consider mod_auth_openidc which use Google as an OpenID provider. Check out https://github.com/pingidentity/mod_auth_openidc

Couldn't find any tutorial to use OpenID with OTRS.
Can you help with any reference

[root]

Within OTRS you have to use the HTTPBasicAuth, Apache httpd handels authentication with mod_auth_openidc. The documentation has examples.

[josy1024]

i have written a module for apache auth with + mod_auth_openidc

as apache is working with openidc and you get den env variables, you could use it an use the $ENV{OIDC_CLAIM_upn} $ENV{OIDC_CLAIM_unique_name} for agent logins.
maybe it's working for google too!

details:
print env:
https://gist.github.com/josy1024/aa2537 ... 85afcec8ce


$Self->{'AuthModule'} = 'Kernel::System::Auth::AzureADAuth';
AzureADAuth.pm
https://gist.github.com/josy1024/84853e ... 24b93264fe

AUTH only FOR AGENTS:
<LocationMatch "^/otrs/index.pl">
AuthType openid-connect
Require valid-user
</LocationMatch>

[root]

i have written a module for apache auth with + mod_auth_openidc

as apache is working with openidc and you get den env variables, you could use it an use the $ENV{OIDC_CLAIM_upn} $ENV{OIDC_CLAIM_unique_name} for agent logins.
maybe it's working for google too!

Hi,

Maybe it's working. But who's maintaining it? Is it packaged? I recommend using existing modules like HTTPBasicAuth. The OpenID connector works and you can copy the variables you need into REMOTE_USER

- Roy

[nedmaj]

This is an old thread, but I would like to share some information about OAuth and mod_auth_openidc.

mod_auth_openidc supports only a Openid Connect provider. A OAuth2 only provider is not supported by mod_auth_openidc.

After login, an OAuth2 provider exchanges a returning code for an access_token, that's all. By the specification it doesn't respond with a so called id_token that is expected by mod_auth_openidc to work.

In other words, a pure OAuth2 provider could authenticate a user but will return no credentials and, so, will not work with mod_auth_openidc neither with Znuny.

More information:

https://github.com/OpenIDC/mod_auth_ope ... sions/1034