Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

unable to disable 'auto_provision' #869

Open
epifanio opened this issue May 14, 2024 · 1 comment
Open

unable to disable 'auto_provision' #869

epifanio opened this issue May 14, 2024 · 1 comment

Comments

@epifanio
Copy link

epifanio commented May 14, 2024

Hi,

I have enbled user_oidc - and i can log-in with my provider, but I need to create users manually and avoid user_oidc auto-provisioning.

I tried to create an user manually from the NextCloud Admin interface, and the set auto-provisioning to false in my config.php by adding:

  'user_oidc' => [
    'auto_provision' => false,
  ],

But then, when I try to log-in with my provider, user_oidc is refusing to log-in and prompt me to the following message:

Access forbidden

Failed to provision the user

Am I doing something wrong?

maybe somethinbg missing in the way how I configure user_oidc ?

I left empty the following section:

Attribute mapping

    User ID mapping

And I have the following as scope:

openid email profile

Thanks for any help!

--- edit ---

I see from the docs:

When soft_auto_provision is disabled
We refuse Oidc login of users that already exist in other backends

Does this means that if I manually create a user, I can not use OIDC login?
It looks like OIDC is not detecting that the user already exist .. I am probably missing something in the settings :(

@epifanio
Copy link
Author

it was a mapping issue, I finally fixed it by setting "preferred_username" as username mapping from my log-in provider

  • found some clue from the "well-known/openid-configuration" provider link

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant