Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
en:2.0:single_sign_on:oidc_joomla [2026/09/08 07:48] – [Setting up the Client (SP) in Admidio] kainhoferen:2.0:single_sign_on:oidc_joomla [2026/09/08 15:52] (current) – [Caveats and Things to Consider] kainhofer
Line 29: Line 29:
     * Choose an easily understood **label for the client** (only used in Admidio's list of clients, but has no technical use)     * Choose an easily understood **label for the client** (only used in Admidio's list of clients, but has no technical use)
     * Enter the **ClientID from the RP**, Copy the created Client Secret (you will later need to paste it indo Joomla's configuration), and enter the **Redirect URI** for the RP. Typically the latter can be found either on the RP's configuration page or in the documentation.     * Enter the **ClientID from the RP**, Copy the created Client Secret (you will later need to paste it indo Joomla's configuration), and enter the **Redirect URI** for the RP. Typically the latter can be found either on the RP's configuration page or in the documentation.
 +    * Many open source OIDC clients do not support encryption (PKCE, which is a security mechanism that prevents attackers from obtaining access unless their application started the initial login). By default, PKCE is required by Admidio, so in this case make sure that the requirement checkbox is turned off. Otherwise you will get an error. 
   * Optionally select (both in Admidio and the RP) which **profile fields should be mapped** to OpenID claims (attributes) and sent to the client, and configure which **group memberships** should be transmitted.   * Optionally select (both in Admidio and the RP) which **profile fields should be mapped** to OpenID claims (attributes) and sent to the client, and configure which **group memberships** should be transmitted.
  
Line 117: Line 118:
   * The free version of the miniOrange plugin is very limited, allowing only login for existing joomla users (with their Admidio passwords at the admidio site). Each user must first be created manually in Joomla!   * The free version of the miniOrange plugin is very limited, allowing only login for existing joomla users (with their Admidio passwords at the admidio site). Each user must first be created manually in Joomla!
   * The free version also does not allow transferring any group information from Admidio to Joomla, or other profile fields.   * The free version also does not allow transferring any group information from Admidio to Joomla, or other profile fields.
-  * Currently, there are no full-featured, free Single-Sign-On solutions for Joomla that support field and group mapping for permissions in Joomla. The miniOrange plugins we described here provide only basic SSO functionality, while the useful features are available only in the paid versions. Given the high costs of these versions and considering the tight budget most non-profit associations face, the paid version is usually way to expensive to even consider...+  * Currently, there are no full-featured, free Single-Sign-On solutions for Joomla that support field and group mapping for permissions in Joomla. The miniOrange plugins we described here provide only basic SSO functionality, while the useful features are available only in the paid versions. Given the high costs of these versions and considering the tight budget most non-profit associations face, the paid version is usually way too expensive to even consider...
  • en/2.0/single_sign_on/oidc_joomla.1788846539.txt.gz
  • Last modified: 2026/09/08 07:48
  • by kainhofer