It is possible to use Nextcloud as IDP for Openproject. The integration OIDC auth method should work with the Keycloak as IDP (open-desk) as well as Nextcloud as IDP (nextcloud-hub) (From [https://community.openproject.org/meetings/4240#item-9472)](https://community.openproject.org/meetings/4240#item-9472\))

Currently, we have been developing and testing the OIDC auth method feature with the Keycloak IDP. The feature should also be compatible with Nextcloud IDP.

<br>

Setting up Nextcloud as IDP:

* [https://github.com/H2CK/oidc](https://github.com/H2CK/oidc) (Also see: [https://github.com/H2CK/oidc/pull/515](https://github.com/H2CK/oidc/pull/515))


## Steps:

**Make Nextcloud an IDP**

1\. Install odic app

2\. Go to Administation -&gt; Security

3\. Under &quot;OpenID Connect clients&quot; section:

&nbsp;  - Add a client name (**not an identifier**)

Begin of the insertion   -End of the insertion Begin of the deletion \-End of the deletion Add a redirect URL (`https://openproject.local/auth/oidc-<idp-displayname-from-OP>/callback`: see OP setup below)

Begin of the insertion   -End of the insertion Begin of the deletion \-End of the deletion Save

Begin of the insertion   -End of the insertion Begin of the deletion \-End of the deletion Note **Client ID** and **Client secret**

Begin of the insertion4\. Create a new user: username, displayname, password, and email 

End of the insertion **Enable user\_oidc configs**

`php occ config:system:set user_oidc --type boolean --value="true" oidc_provider_token_generation`

`php occ config:system:set user_oidc --type boolean --value="true" oidc_provider_bearer_validation`

**Add Nextcloud as an IDP in OpenProject**

1\. Go to Administration -&gt; Authentication

2\. Add a custom OpenID provider:

Begin of the insertion* End of the insertion Begin of the deletion \-End of the deletion Display name: `nextcloud` (use this name as redirect URL in Nextcloud: `<idp-displayname-from-OP>`) Begin of the insertion

* End of the insertion Begin of the deletion

\-End of the deletion Discovery URL: `https://nextcloud.local/index.php/.well-known/openid-configuration` Begin of the insertion

* End of the insertion Begin of the deletion

\-End of the deletion Client ID: `client-id` from Nextcloud Begin of the insertion

* End of the insertion Begin of the deletion

\-End of the deletion Client secret: `client-secret` from Nextcloud Begin of the insertion

* End of the insertion Begin of the deletion

\-End of the deletion Finish setup Begin of the insertion


3\. Login to openproject with created nextcloud user.End of the insertion