New free extension: OAuth

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • eymen-elkum
    Active Community Member
    • Nov 2014
    • 472
    #1

    New free extension: OAuth

    Hello friends,

    I am happy to announce the new free extension Ebla OAuth, many thanks for Riny for his supporting us for this extension,
    I will happy to get your feedback & issues on forum or directly on the github issues:

    Releases · eblasoft/ebla-oauth
    https://github.com/eblasoft/ebla-oauth/releases
    Contribute to eblasoft/ebla-oauth development by creating an account on GitHub.
    CEO of Eblasoft
    EspoCRM Expert since 2014
    Full Stack Web Developer since 2008
    Creator of Numerous Successful Extensions & Projects​
    Tags: None
    • yuri
      Member
      • Mar 2014
      • 8440
      #2
      Hi,

      Thanks for your work.

      Can it potentially support OIDC protocol (or maybe it already does) that became a widely used standard replacing SAML?

      We will need to have the ability to add such login logic to the login page in an upgrade save way.
      Last edited by yuri; 09-10-2022, 07:40 AM.
      If you find EspoCRM good, we would greatly appreciate if you could give the project a star on GitHub. We believe our work truly deserves more recognition. Thanks.

        Comment

        • rinorway
          Senior Member
          • Feb 2016
          • 179
          #3
          OIDC is basically a layer on top of OAuth. This extension does use OAuth, not SAML.

          I think currently OIDC does not provide enough added value yet in this case but it may in future.

            Comment

            • yuri
              Member
              • Mar 2014
              • 8440
              #4
              There were multiple requests to implement SAML or Open ID Connect in Espo to be able to authenticate from an authentication provider an organization is already uses in their business. Luckily, we have Open ID Connect gained its popularity, which is much simpler to implement than SAML. Implementing OIDC for Espo would be a huge deal for the product, and I have already it in our internal TODO list.
              Last edited by yuri; 09-27-2022, 11:03 AM.
              If you find EspoCRM good, we would greatly appreciate if you could give the project a star on GitHub. We believe our work truly deserves more recognition. Thanks.

                Comment

                • yuri
                  #4.1
                  yuri commented
                  09-12-2022, 01:41 PM
                  Editing a comment
                  As I understand, OAuth2.0 has more broad usage, when OIDC serves purely for authentication (logging in).
                • item
                  Active Community Member
                  • Mar 2017
                  • 1476
                  #5
                  Hello Yuri,
                  it's out of my knowledge.. but maybe here you can have some information util :

                  Page non trouvée. | Platform eHealth
                  https://www.ehealth.fgov.be/ehealthplatform/fr/service-iam-identity-access-management#docType1

                  https://www.ehealth.fgov.be/ehealthp...ement#docType2
                  the page is in french but many document pdf is in english

                  it's belgian gouvernment authority.. when you have authentified there, you can access all gouvernment web app. (two think : authentified + authorisation )


                  Best Regards
                  If you could give the project a star on GitHub. EspoCrm believe our work truly deserves more recognition. Thanks.​

                    Comment

                    • bandtank
                      Active Community Member
                      • Mar 2017
                      • 379
                      #6
                      What does it do? There are dozens of ways to implement oauth, so this needs an explanation.

                        Comment

                      • bandtank
                        Active Community Member
                        • Mar 2017
                        • 379
                        #7
                        I looked at the readme. It doesn't explain how the extension works. There are dozens of ways for oauth to be implemented.

                        There are four ways to accomplish SSO via oauth in AAD, which is dependent upon the configuration of the M365 tenant. The readme doesn't mention endpoints, parameters, processes, workflows, or requirements. It's not a good idea to adopt an authorization flow without more details.

                          Comment

                          • mkas
                            Junior Member
                            • Feb 2021
                            • 26
                            #8
                            Does this extension work to authorise group accounts login to IMAP?

                              Comment

                              Previous template Next
                              Working...