02/19/2025

• Feature SI-77: Audience selection for Nextcloud Hub scenario
  updated by Jan Sandbrink on 02/19/2025 03:32 PM
  • Status changed from specified to in development
  • Accountable set to Jan Sandbrink
• Implementation SI-62: Update RemoteIdentity after token exchange
  updated by GitHub ⁤ on 02/19/2025 01:45 PM
  • Comment added

    opf/openproject#17912 deployed to qa.openproject-edge.com

• Feature SI-77: Audience selection for Nextcloud Hub scenario
  created by Jan Sandbrink on 02/19/2025 01:42 PM
• Epic SI-2: Seamless integration of user sessions of Nextcloud and OpenProject using OIDC & JWTs
  updated by Jan Sandbrink on 02/19/2025 01:37 PM
  • Comment added

    We just discussed what can be implemented within the scope of 15.4 here. Our rough plan goes like this:
    Real release (...

  • Version set to 15.5.0
• Feature SI-3: Add and document Keycloak to the Docker based development setup
  updated by Jan Sandbrink on 02/19/2025 01:37 PM
  • Version set to 15.4.0
• Feature SI-54: Allow migration from a "two-way OAuth 2" setup to "OAuth 2 SSO"
  updated by Jan Sandbrink on 02/19/2025 01:37 PM
  • Version set to 15.5.0
• Feature SI-71: OIDC provider creation: Prefill scopes instead of showing a placeholder
  updated by Jan Sandbrink on 02/19/2025 01:34 PM
  • Status changed from new to specified
  • Version set to 15.5.0
• Feature SI-73: Allow to configure SSO authentication + two-way OAuth 2
  updated by Jan Sandbrink on 02/19/2025 01:34 PM
  • Version set to 15.4.0
• Feature SI-74: Storage Health status: Multiple visible checks
  updated by Jan Sandbrink on 02/19/2025 01:34 PM
  • Version set to 15.5.0
• Feature SI-47: Support OIDC in storage health status
  updated by Jan Sandbrink on 02/19/2025 01:33 PM
  • Version changed from 15.4.0 to 15.5.0
• Feature SI-53: Up-sale mechanism (Corporate Edition) for OIDC, JWT and SCIM
  updated by Jan Sandbrink on 02/19/2025 01:31 PM
  • Version changed from 15.4.0 to 15.5.0
• Feature SI-14: Extend Nextcloud files storage to use SSO access tokens
  updated by Jan Sandbrink on 02/19/2025 01:31 PM
  • Assignee changed from Jan Sandbrink to Pavel Balashou
• Implementation SI-62: Update RemoteIdentity after token exchange
  updated by GitHub ⁤ on 02/19/2025 01:31 PM
  • Comment added

• Open Point SI-50: How to deal with expired refresh tokens?
  updated by Jan Sandbrink on 02/19/2025 12:54 PM
  • Status changed from new to decided
  • Decision set to Hint
• Feature SI-76: Show proper error message when refresh token is unusable
  created by Jan Sandbrink on 02/19/2025 12:53 PM
• Implementation SI-75: Check if user has a token with the required audiences
  updated by GitHub ⁤ on 02/19/2025 11:28 AM
  • Comment added

• Implementation SI-75: Check if user has a token with the required audiences
  created by Marcello Rocha Pereira on 02/19/2025 11:23 AM
• Implementation SI-72: Check if user is Provisioned by an OIDC IdP
  updated by Marcello Rocha Pereira on 02/19/2025 11:22 AM
  • Status changed from needs review to closed
• Implementation SI-72: Check if user is Provisioned by an OIDC IdP
  updated by GitHub ⁤ on 02/19/2025 10:45 AM
  • Comment added

    opf/openproject#17940 deployed to qa.openproject-edge.com

• Open Point SI-58: Should OAuth 2.0 SSO and Two-Way OAuth 2.0 be mutually exclusive or should SSO fall back to Two-Way?
  updated by Jan Sandbrink on 02/19/2025 10:28 AM
  • Status changed from new to decided
  • Decision set to We allow configuration of both
• Open Point SI-57: Should we exchange tokens lazily or eagerly?
  updated by Jan Sandbrink on 02/19/2025 10:27 AM
  • Status changed from new to decided
  • Decision set to lazy
• Feature SI-10: File storages settings for type Nextcloud: Allow OIDC based connection instead of OAuth2
  updated by Jan Sandbrink on 02/19/2025 10:27 AM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Feature SI-68: Store token expiration information for OIDC user tokens
  updated by Jan Sandbrink on 02/19/2025 10:25 AM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Implementation SI-72: Check if user is Provisioned by an OIDC IdP
  updated by GitHub ⁤ on 02/19/2025 10:13 AM
  • Comment added

• Implementation SI-72: Check if user is Provisioned by an OIDC IdP
  updated by Marcello Rocha Pereira on 02/19/2025 09:54 AM
  • Version set to 15.4.0
• Feature SI-68: Store token expiration information for OIDC user tokens
  updated by GitHub ⁤ on 02/19/2025 08:57 AM
  • Comment added

02/18/2025

• Feature SI-68: Store token expiration information for OIDC user tokens
  updated by Jan Sandbrink on 02/18/2025 10:50 AM
  • Status changed from specified to in development
  • Assignee set to Jan Sandbrink
• Feature SI-73: Allow to configure SSO authentication + two-way OAuth 2
  updated by Jan Sandbrink on 02/18/2025 10:46 AM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Feature SI-73: Allow to configure SSO authentication + two-way OAuth 2
  updated by GitHub ⁤ on 02/18/2025 09:06 AM
  • Comment added

• Feature SI-74: Storage Health status: Multiple visible checks
  updated by GitHub ⁤ on 02/18/2025 08:40 AM
  • Comment added

• Feature SI-74: Storage Health status: Multiple visible checks
  created by Jan Sandbrink on 02/18/2025 07:43 AM
  • Comment added

    Marcello Rocha Pereira Let's have a lot over the AC together once (optionally including Eric Schubert and Pavel Balashou...

02/17/2025

• Feature SI-73: Allow to configure SSO authentication + two-way OAuth 2
  updated by Jan Sandbrink on 02/17/2025 01:05 PM
  • Description changed (Details)
  • Status changed from new to in development
  • Assignee set to Jan Sandbrink
  • Accountable set to Jan Sandbrink
• Implementation SI-46: Allow configuration of new authentication method through UI
  updated by Jan Sandbrink on 02/17/2025 11:36 AM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Feature SI-73: Allow to configure SSO authentication + two-way OAuth 2
  created by Jan Sandbrink on 02/17/2025 11:26 AM
• Bug SI-42: Internal server error on Azure OIDC login with expired client secret
  updated by Cécile Guiot on 02/17/2025 11:16 AM
  • Status changed from tested to closed
• Implementation SI-46: Allow configuration of new authentication method through UI
  updated by GitHub ⁤ on 02/17/2025 11:03 AM
  • Comment added

02/14/2025

• Code maintenance SI-56: Refactor to support different steps during setup
  updated by GitHub ⁤ on 02/14/2025 04:45 PM
  • Comment added

    opf/openproject#17738 deployed to qa.openproject-edge.com

• Code maintenance SI-56: Refactor to support different steps during setup
  updated by Jan Sandbrink on 02/14/2025 04:16 PM
  • Status changed from in review to merged
  • Assignee deleted (Jan Sandbrink)
• Code maintenance SI-56: Refactor to support different steps during setup
  updated by GitHub ⁤ on 02/14/2025 04:16 PM
  • Comment added

02/13/2025

• Implementation SI-62: Update RemoteIdentity after token exchange
  updated by GitHub ⁤ on 02/13/2025 05:56 PM
  • Comment added

• Implementation SI-72: Check if user is Provisioned by an OIDC IdP
  updated by Marcello Rocha Pereira on 02/13/2025 05:09 PM
  • Status changed from in development to needs review
  • Assignee deleted (Marcello Rocha Pereira)
• Implementation SI-72: Check if user is Provisioned by an OIDC IdP
  updated by GitHub ⁤ on 02/13/2025 05:09 PM
  • Comment added

• Implementation SI-72: Check if user is Provisioned by an OIDC IdP
  created by Marcello Rocha Pereira on 02/13/2025 04:50 PM
• Implementation SI-65: Check for OIDC audience configuration
  updated by GitHub ⁤ on 02/13/2025 04:15 PM
  • Comment added

    opf/openproject#17914 deployed to qa.openproject-edge.com

• Implementation SI-66: Add check for OIDC IdP capabilities
  updated by Marcello Rocha Pereira on 02/13/2025 03:39 PM
  • Status changed from needs review to new
• Implementation SI-65: Check for OIDC audience configuration
  updated by Marcello Rocha Pereira on 02/13/2025 03:39 PM
  • Status changed from in development to closed
  • Assignee deleted (Marcello Rocha Pereira)
• Implementation SI-65: Check for OIDC audience configuration
  updated by GitHub ⁤ on 02/13/2025 03:38 PM
  • Comment added

• Feature SI-71: OIDC provider creation: Prefill scopes instead of showing a placeholder
  created by Jan Sandbrink on 02/13/2025 03:32 PM
• Implementation SI-43: Allow to perform NC authentication using stored access tokens
  updated by GitHub ⁤ on 02/13/2025 01:45 PM
  • Comment added

    opf/openproject#17865 deployed to qa.openproject-edge.com

• Implementation SI-66: Add check for OIDC IdP capabilities
  updated by GitHub ⁤ on 02/13/2025 01:24 PM
  • Comment added

• Implementation SI-43: Allow to perform NC authentication using stored access tokens
  updated by Eric Schubert on 02/13/2025 01:05 PM
  • Status changed from needs review to closed
• Implementation SI-43: Allow to perform NC authentication using stored access tokens
  updated by GitHub ⁤ on 02/13/2025 01:05 PM
  • Comment added

• Feature SI-47: Support OIDC in storage health status
  updated by Marcello Rocha Pereira on 02/13/2025 11:29 AM
  • Comment added

    Added flow diagram for the checks and its source plantUML file. This will help keep track of progress and frame the disc...

  • File link to OIDC Validation-OIDC_SSO_Validation_Steps.svg (nextcloud.openproject.org) added
  • File link to OIDC Validation.puml (nextcloud.openproject.org) added