Can't do first login

[ekevu123]

I have just freshly installed Outline via Cloudron, but when I try to enter the domain, I am stuck with the screen "Login to Outline" and nothing happens. I checked the logs, but there's nothing happening either except "Listening to DOMAIN".

[nebulon]

For a start, have you installed the app with Cloudron usermanagement enabled or not? Note that either the first user who logs into the app (if SSO is enabled) or the first user registering, will become admin.

[ekevu123]

I have installed it without cloudron user management enabled and I am happy if the first user becomes admin, but I cannot access it.

I have just tried again and got this in the logs this time:
{"level":"warn","message":"Enforced https was disabled with FORCE_HTTPS env variable"}

[ekevu123]

I have just re-installed it activating cloudron user management, then it works.

[nebulon]

I can confirm that only a mostly blank screen will be shown if SSO is disabled. Looking into this now.

[nebulon]

This appears to have changed by now as email+password login is not supported anymore https://docs.getoutline.com/s/hosting/doc/authentication-7ViKRmRY5o

I guess we can then remove the optionalSso flag and only have Cloudron OpenID integration.

[nebulon]

After investigating, I can confirm what is mentioned already in the app's postinstall:

"A SSO login mechanism has to be configured to be able to login."

So while this is a somewhat strange behavior, this is what upstream has. So unless one wants other external auth providers, I guess Cloudron SSO is the preferred one.

[ekevu123]

Got it, thank you for investigating!

[shrey]

Hi @nebulon

How to remove Cloudron SSO, from an existing Outline instance?

(I do already have another SSO configured, Google, in this case)

[nebulon]

Cloudron SSO integration can only be configured on installation time. The packages are designed in a way to always ensure that setting, so it will be reset on next restart, even if you disable it. There are just too many corner-cases with matching usernames/email/... which people end up when auth provider are changed midway, so we went for an install time option.

So to not use Cloudron SSO you would have to reinstall the app and migrate the data manually, ensuring somehow the user mapping for outline is fine.

[shrey]

@nebulon

Ah, never mind.
Just tested a new Outline instance, with Google SSO.

Although, it works, it works only with Google Workspace accounts, and not with private emails.