Content
You are here:
Google Apps Authentication
Added by jason southwell over 10 years ago
I’ve been using ActiveDirectory authentication since going live and it’s been working great. Unfortunately our internet connection and server space at the office is less than ideal so I’d like to move it to the cloud. Each of our employees have an account with Google Apps for our domain and I’d like to be able to switch our authentication from AD to OpenID/Google Apps.
Does OpenProject support authentication via Google Apps? I understand it’s supported in Redmine (and maybe ChiliProject) so I’m hoping so.
And if so, is it something that we can just activate for all of our current users if their email address is on the same apps domain?
Replies (2)
You’re lucky, we recently added Omniauth support for OpenProject. It’s only in the dev branch, which will be released in the next months.
We also created a plugin for using that Omniauth support with OpenID Connect, which in turn allows you to authenticate via a Google Account (including Google Apps). We haven’t released this plugin yet and I can’t promise you a date, but we’ll discuss it and I’ll write here when I have an update.
EDIT: I just noticed you want to use Google Apps authentication for existing users. OpenProject does not support linking existing users to an Omniauth account. I hope we’ll implement that, but I can’t promise you anything here. In each case, every user would have to associate their Google account with their OpenProject account manually, as we have to use an internal identifier to associate Google and OpenProject accounts as mail addresses can change.
If you want to implement this, we’d welcome a pull request :) As this might have security implications, I think you should write up your approach in a ticket beforehand, so we can give you feedback.
Cheers,
Michael
I want to create a plugin to authenticate users OpenProject via Open University of Catalonia (http://www.uoc.edu). Can I use omniauth support for OpenProject? Is possible to use yet?
I saw another gem called omniauth-oauth2(https://github.com/intridea/omniauth-oauth2). Is correct use to build new plugin oauth2uoc?
Regards,
Daniel