Content
View differences
Updated by Markus Kahl almost 6 years ago
**As an** OpenProject admin
**I want** to allow automatic user creation for an OIDC provider
**so that** OIDC users can be created automatically while not allowing new users to sign up via the registration form.
Currently user creation via OIDC (OpenID Connect) providers is controlled through the self registration setting that also controls if users can create accounts authenticated through OpenProject.
For LDAP auth sources we allow automatic user creation independently from the self registration setting. This should work like this for OIDC providers too.
On a related note, the configuration disable\_password\_login should probably not hide the password-login form if auth sources are configured. Instead it should merely deactivate authentication though OpenProject itself (rather than via auth source or OIDC).
**I want** to allow automatic user creation for an OIDC provider
**so that** OIDC users can be created automatically while not allowing new users to sign up via the registration form.
Currently user creation via OIDC (OpenID Connect) providers is controlled through the self registration setting that also controls if users can create accounts authenticated through OpenProject.
For LDAP auth sources we allow automatic user creation independently from the self registration setting. This should work like this for OIDC providers too.
On a related note, the configuration disable\_password\_login should probably not hide the password-login form if auth sources are configured. Instead it should merely deactivate authentication though OpenProject itself (rather than via auth source or OIDC).