discourse/plugins/discourse-openid-connect/config/settings.yml
David Taylor 2167034172
FEATURE: Enable group sync for OpenID Connect plugin (#39082)
When configured, this will check the configured 'claim' for an array of
group names. These group names will be ingested into core's "Associated
Groups" system.

To connect an OIDC group to a Discourse group, first ensure that at
least one member of the group has logged-in. Then go to the Discourse
group "Manage" tab, then "Membership" -> "Automatic", and select the
`oidc:*` group from the list.

<img width="1099" height="670" alt="SCR-20260402-pyfg"
src="https://github.com/user-attachments/assets/1bb36c9f-5077-47a1-bb4c-e755b87e6622"
/>
2026-04-16 18:04:17 +01:00

61 lines
1.4 KiB
YAML

discourse_openid_connect:
openid_connect_enabled:
default: false
area: "oidc"
openid_connect_discovery_document:
default: ""
area: "oidc"
openid_connect_client_id:
default: ""
area: "oidc"
openid_connect_client_secret:
default: ""
secret: true
area: "oidc"
openid_connect_rp_initiated_logout:
default: false
area: "oidc"
openid_connect_rp_initiated_logout_redirect:
default: ""
area: "oidc"
openid_connect_rp_initiated_logout_include_client_id:
default: false
area: "oidc"
openid_connect_allow_association_change:
default: false
area: "oidc"
openid_connect_overrides_email:
default: false
area: "oidc"
openid_connect_authorize_scope:
default: "openid"
area: "oidc"
openid_connect_verbose_logging:
default: false
area: "oidc"
openid_connect_token_scope:
default: ""
area: "oidc"
openid_connect_error_redirects:
default: ""
type: list
list_type: secret
area: "oidc"
openid_connect_authorize_parameters:
default: ""
type: list
list_type: compact
area: "oidc"
openid_connect_claims:
default: ""
textarea: true
area: "oidc"
openid_connect_match_by_email:
default: true
area: "oidc"
openid_connect_groups_claim:
default: ""
area: "oidc"
openid_connect_use_pkce:
default: false
area: "oidc"