New free extension: OAuth

[eymen-elkum]

Hello friends,

I am happy to announce the new free Ebla OAuth extension. Many thanks to Riny for supporting its development.
I would be happy to receive your feedback and issue reports here on the forum or through GitHub:

Releases
Report an issue

[yuri]

Hi,

Thanks for your work.

Can it potentially support OIDC protocol (or maybe it already does) that became a widely used standard replacing SAML?

We will need to have the ability to add such login logic to the login page in an upgrade save way.

[rinorway]

OIDC is basically a layer on top of OAuth. This extension does use OAuth, not SAML.

I think currently OIDC does not provide enough added value yet in this case but it may in future.

[yuri]

There were multiple requests to implement SAML or Open ID Connect in Espo to be able to authenticate from an authentication provider an organization is already uses in their business. Luckily, we have Open ID Connect gained its popularity, which is much simpler to implement than SAML. Implementing OIDC for Espo would be a huge deal for the product, and I have already it in our internal TODO list.

[yuri]

As I understand, OAuth2.0 has more broad usage, when OIDC serves purely for authentication (logging in).

[item]

Hello Yuri,
it's out of my knowledge.. but maybe here you can have some information util :

https://www.ehealth.fgov.be/ehealthplatform/fr/service-iam-identity-access-management#docType1

https://www.ehealth.fgov.be/ehealthp...ement#docType2
the page is in french but many document pdf is in english

it's belgian gouvernment authority.. when you have authentified there, you can access all gouvernment web app. (two think : authentified + authorisation )


Best Regards

[bandtank]

What does it do? There are dozens of ways to implement oauth, so this needs an explanation.

[rinorway]

Maybe have a look at the readme.md at https://github.com/eblasoft/ebla-oauth

[bandtank]

I looked at the readme. It doesn't explain how the extension works. There are dozens of ways for oauth to be implemented.

There are four ways to accomplish SSO via oauth in AAD, which is dependent upon the configuration of the M365 tenant. The readme doesn't mention endpoints, parameters, processes, workflows, or requirements. It's not a good idea to adopt an authorization flow without more details.

[mkas]

Does this extension work to authorise group accounts login to IMAP?