How to Import / synchronize a group of Cloudron's users to Nextcloud ?

[nebulon]

Since OpenID does not have a good way to list users who have access to resources (in this case apps) We likely can't support some automatic pre-provisioning based on that from a platform side. Users have to login once to create the user record within the app.

If some pre-provisioning is required, I guess one has to write some custom script calling the Nextcloud API as they suggest in their docs which you have linked.

The alternative would be to keep ldap for user sync around, but I am not sure how well this will be supported in the future. Already there is a warning icon in the nextcloud docs for that.

All in all I am not sure if we do us any favor here to automate that, especially given that most apps behave that way that one needs to login once.

[osobo]

Thanks for your thorough reply. Ok I think I will impersonate them and log each account manually in order to register them in Nextcloud's user list.

[joseph]

@osobo for hiding the login form, see https://forum.cloudron.io/topic/13188/nextcloud-oidc-integration

[osobo]

@joseph Thanks. I've added the code below in Nextcloud's config.php and it works fine.

'social_login_auto_redirect' => true,
'hide_login_form' => true,

Now I just wish to know if there is a way to remove or change the default text on the login window (?)

"The Nextcloud login form is disabled. Use another login option if available or contact your administration."

No big deal if not possible.
Best wishes

[andreasdueren]

@osobo Pretty sure that's hardcoded. But you can simply bypass the screen by running occ config:app:set --value=0 user_oidc allow_multiple_user_backends in the terminal

[madrush]

@andreasdueren That worked. Thank you for your help!

[andreasdueren]

@madrush no problem

[ntnsndr]

Amazing—this is a huge help @andreasdueren! It really improves the user experience. I'd love to see this kind of direct login option on more Cloudron apps, without the confusion of multiple options. Maybe this should be added to the official docs?

[jdaviescoates]

@andreasdueren said in How to Import / synchronize a group of Cloudron's users to Nextcloud ?:

@osobo Pretty sure that's hardcoded. But you can simply bypass the screen by running occ config:app:set --value=0 user_oidc allow_multiple_user_backends in the terminal

I was wondering exactly what that'd do and so I gave it a go...

In short:

1. If you're logged into your Cloudron in the same browser session -> completely bypasses the need to login and you just arrive into Nextcloud - great!

2. If you're not logged into your Cloudron you end up at a Cloudron login screen a bit like this:

[jdaviescoates]

@jdaviescoates said in How to Import / synchronize a group of Cloudron's users to Nextcloud ?:

@andreasdueren said in How to Import / synchronize a group of Cloudron's users to Nextcloud ?:

@osobo Pretty sure that's hardcoded. But you can simply bypass the screen by running occ config:app:set --value=0 user_oidc allow_multiple_user_backends in the terminal

I was wondering exactly what that'd do and so I gave it a go...

In short:

1. If you're logged into your Cloudron in the same browser session -> completely bypasses the need to login and you just arrive into Nextcloud - great!

2. If you're not logged into your Cloudron you end up at a Cloudron login screen a bit like this:

One downside: preview links in Signal/ WhatsApp etc become OpenID Connect Error :