7 ms·
If you can write some code discourse can do it. I’ve done it and it’s easy https://meta.discourse.org/t/official-single-sign-on-for-discourse-sso/13045 https://
by nerdbaggy 7y ago
If you can write some code discourse can do it. I’ve done it and it’s easy https://meta.discourse.org/t/official-single-sign-on-for-discourse-sso/13045 https://meta.discourse.org/t/official-single-sign-on-for-dis...
- jimkleiber 7y agoNice, I see the link talks about SSO with Discourse but not sure which service you use to do the identity verification. Could you say a little more about how you did it?
- KajMagnus 7y ago@jimkleiber, Discourse, and Talkyard too, also have settings for Require-manual-approval-of-new-users. And restricting signups to whitelisted email domains. How will / do-you-have-in-mind-to verify people's identities? Talkyard (like Discourse) has Single Sign-On via API — so you can have an external piece of software that somehow verifies people's identities, and Single Sign-On connects to Talkyard and upserts those verified users (like @nerdbaggy wrote). With Talkyard, the SSO API looks like this: Your own piece of software sends `POST talkyard-server/-/v0/sso-upsert-user-generate-login-secret` plus JSON for an external user. Then you get back a login secret, and you can redirect the end user's browser to `talkyard-server/-/v0/login-with-secret?oneTimeSecret=...` \* * * @jimkleiber you asked @nerdbaggy: > not sure which service you use to do the identity verification. Could you say a little more about how you did it? I'm thinking @nerdbaggy meant s/he Single Sign-On integrated with Discourse? But maybe didn't actually verify people's identities. Those are two different things, and I'm thinking likely you'll need to come up with your own way to verify people's identities (?)