Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps | Demo | Docs | Install
  1. Cloudron Forum
  2. Feature Requests
  3. OpenID Connect group restrictions?

OpenID Connect group restrictions?

Scheduled Pinned Locked Moved Feature Requests
7 Posts 4 Posters 473 Views 4 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P Offline
      P Offline
      Peter Newman
      wrote on last edited by
      #1

      Is there, or is there planned to be, a way to restrict an OpenID Connect provider to members of a certain group?

      Specifically, we have a web site hosted outside of Cloudron, that it would be great to use our Cloudron accounts to control user access to. OpenID Connect (and other OAuth variants) are supported, so Cloudron just coming out with a Provider, is promising. But we want to restrict it to a particular group of users.

      1 Reply Last reply
      1
      • nebulonN Away
        nebulonN Away
        nebulon
        Staff
        wrote on last edited by
        #2

        The oidc addon for apps already has group restriction support, however for external apps, this is not implemented. Technically it can be added so I will move this thread to feature requests section.

        1 Reply Last reply
        1
        • nebulonN nebulon moved this topic from Support on
        • K Offline
          K Offline
          krumel
          wrote last edited by
          #3

          Is there any update on this? The current system of allowing all users is a bit suboptimal.

          1 Reply Last reply
          1
          • J Online
            J Online
            joseph
            Staff
            wrote last edited by
            #4

            @krumel which app ? group restrictions (roles/permissions) are applied inside the app's configuration, so it really depends if the app supports this.

            1 Reply Last reply
            0
            • nebulonN Away
              nebulonN Away
              nebulon
              Staff
              wrote last edited by
              #5

              I think the feature request is for the OpenID provider feature, so external apps can be setup to use the Cloudron. For this we have to implement a group/user access restriction in the OpenID external client settings.

              J 1 Reply Last reply
              0
              • nebulonN nebulon

                I think the feature request is for the OpenID provider feature, so external apps can be setup to use the Cloudron. For this we have to implement a group/user access restriction in the OpenID external client settings.

                J Online
                J Online
                joseph
                Staff
                wrote last edited by joseph
                #6

                @nebulon ah, "web site hosted outside of Cloudron" . So this is for app proxy?

                @krumel you are also using app proxy?

                1 Reply Last reply
                0
                • K Offline
                  K Offline
                  krumel
                  wrote last edited by krumel
                  #7

                  I am also using app proxy,but my question is unrelated to that, nebulon has already noted the intended use Peter (and now I) meant.

                  1 Reply Last reply
                  1
                  Reply
                  • Reply as topic
                  Log in to reply
                  • Oldest to Newest
                  • Newest to Oldest
                  • Most Votes


                    • Login

                    • Don't have an account? Register

                    • Login or register to search.
                    • First post
                      Last post
                    0
                    • Categories
                    • Recent
                    • Tags
                    • Popular
                    • Bookmarks
                    • Search