OpenID Connect OAuth2 - egroupware - Gitea: Git with a cup of tea

extern/egroupware

mirror of https://github.com/EGroupware/egroupware.git synced 2024-11-24 00:43:31 +01:00

Table of Contents

EGroupware 19.1+ comes with an OpenID Connect / OAuth2 server integrated
Supported endpoints
Supported Grants:
Client configuration in EGroupware
Configuration of tested clients
Troubleshooting

EGroupware 19.1+ comes with an OpenID Connect / OAuth2 server integrated

This page describes how to authenticate and (optionally) integrate other applications using it.

Supported endpoints

Authorization: https://example.org/egroupware/openid/endpoint.php/authorize
Token: https://example.org/egroupware/openid/endpoint.php/access_token
Token Introspection: https://example.org/egroupware/openid/endpoint.php/introspect
User information: https://example.org/egroupware/openid/endpoint.php/userinfo
Public key: https://example.org/egroupware/openid/endpoint.php/jwks

Replace example.org with the full qualified domain-name your EGroupware server uses.

Supported Grants:

Authorization Code: user authorized access and get auth-code, server requests access-token via backchannel
Refresh Token: token to refresh access-token after it's expired
Client Credentials: server requests access-token without further authorization
Implicit: user authorized access and get access-token and auth-code, server requests own access-token via backchannel
Password Credential: other server checks username/password of EGroupware user (not recommended any more, as other server gets the password!)

Client configuration in EGroupware

Go to: Admin > Applications > OpenID / OAuth2 server > Clients

Configuration of tested clients

Troubleshooting

Enable request log under: Admin > Applications > OpenID / OAuth2 server > Request log

While the log does not record passwords, it contains the issued token and should not left running!

Free support via EGroupware Forum where users help other users and EGroupware GmbH supporters also help to a certain extend
EGroupware GmbH offers payed support including our OpenID Connect and OAuth2 server

Language:

Home

Installation & Update

General information
Distribution specific instructions
Update recommendations and troubleshooting
Tuning EGroupware for higher number of users
Docker-compose installation: Linux, Windows, Mac, Synology, QNAP
Configure IMAP push

Customizing EGroupware

EGroupware Mail server

IMAP Push Notifications for Dovecot 2.2+
Using EGroupware Mail server with ActiveDirectory

CTI / Computer Telephone Integration

OpenID Connect / OAuth2

SAML SSO with Univention

EGroupware REST-API

Wordpress Contact form via REST-API

Collabora Integration

Guacamole integration

Rocket.Chat Integration

Using SmallPART with a LMS (Moodle, OpenOLAT, ...)

Synchronisation between Untis / Webuntis and EGroupware

Development

Website | Tutorials | Impressum