Egroupware Rocketchat with password Oauth

somogyi 2020-04-23 07:02:14 UTC #1

Is it possible to authenticate Rocketchat with password settings? Ive found an option to set this but it seems to be not work.
Attach screenshot for the details.

Egroupware - Rocketchat settings:

Rocketchat log:

Thx,
Z

RalfBecker 2020-04-23 07:19:33 UTC #2

That only works if you have a shared identify provider eg. LDAP or ActiveDirectory AND both EGroupware and Rocket.Chat is configured to use it. Then EGroupware can pass the credentials along. We use that eg. for Univention Systems.

For everyone else OpenID Connect / OAuth2 is the way to go.

Ralf

somogyi 2020-04-23 07:25:00 UTC #3

The egroupware and the rocketchat is connected the same Active Directory, but when i click login with egroupware (instead write username and password), not work.

The intresting effect: work only if the user in Admins group

Openid connect / Oauth2 also not work.

RalfBecker 2020-04-23 07:44:38 UTC #4

That is NOT how this works!

[Login with EGroupware] is always OAuth.

If you want to use Password, then you (or your browsers password manager) has to fill in username and password. The setting only tells EGroupware to use your username and password when it talks server to server with Rocket.Chat.

Ralf

somogyi 2020-04-23 07:52:22 UTC #5

Oh, okay i understand.

Other question: If i set Openid connect / Oauth2 (not password), is it working with active directory setup? Or Oauth need database accounts?

RalfBecker 2020-04-23 08:06:24 UTC #6

As long as your EGroupware works with active directory, the Open ID Connect / OAuth2 server in EGroupware works and allows Rocket.Chat to use OAuth.

Ralf