Ask Questions and Find Answers
Important:
Ask is now read-only. You can review any existing questions and answers, but not add anything new.
But - don't panic! While ask is no more, we've replaced it with discuss - the new Liferay Discussion Forum! Read more here here or just visit the site here:
discuss.liferay.com
OpenId/ liferay 6.2.5
Hello,
I'm trying to configure openId on liferay 6.2.5 with tomcat, but i'm not sure what to put in OpenID input at login screen. In addition there's nothing like openId connect provider ( it is in liferay 7.3 ) so i'm not sure how to pass clientId e.t.c. Could anybody help me?
Thank you
I'm trying to configure openId on liferay 6.2.5 with tomcat, but i'm not sure what to put in OpenID input at login screen. In addition there's nothing like openId connect provider ( it is in liferay 7.3 ) so i'm not sure how to pass clientId e.t.c. Could anybody help me?
Thank you
You mention OpenID and then you also wonder about OpenID Connect for v6.2.5. For the latter, there is an OpenID Connect plugin in the marketplace that might work for you in v6.2.5 https://web.liferay.com/marketplace/-/mp/application/78695724
I tried this marketplace plugin in v6.2.5 and it functioned well (against keycloak in my use case). It isn't designed to support multiple providers like that we see OOTB in v7.3, but you may not need such. If you do need such, the source is there...
I tried this marketplace plugin in v6.2.5 and it functioned well (against keycloak in my use case). It isn't designed to support multiple providers like that we see OOTB in v7.3, but you may not need such. If you do need such, the source is there...
Thank you for your reply!
I tried with plugin you mentioned above. I pasted it to hotdeploy and as i see from tomcat log it deployed successfully. Later i did paste configuration in webapps/ROOT/WEB-INF/classess/portal-ext.properties as instructed
openidconnect.enableOpenIDConnect=true
openidconnect.authorization-location=https://bleusoft-dev.onelogin.com/oidc/2/auth
openidconnect.token-location=https://bleusoft-dev.onelogin.com/oidc/2/token
openidconnect.profile-uri=https://bleusoft-dev.onelogin.com/oidc/2/me
openidconnect.issuer=https://openid-connect.onelogin.com/oidc
openidconnect.client-id=UPTAED
openidconnect.secret=UPDATED
openidconnect.scope=openid profile email
Unfortunately I'm not seeing any extra button for OIDC login. All i got i openId buttton with opendId input, but i doubt it's correlated as I it was there before I installed OIDC plugin.
Have you got any advice what to do now?
UPDATE
It turned out i had to click openId button and then sign in to get redirected. Thank you for your help
I tried with plugin you mentioned above. I pasted it to hotdeploy and as i see from tomcat log it deployed successfully. Later i did paste configuration in webapps/ROOT/WEB-INF/classess/portal-ext.properties as instructed
openidconnect.enableOpenIDConnect=true
openidconnect.authorization-location=https://bleusoft-dev.onelogin.com/oidc/2/auth
openidconnect.token-location=https://bleusoft-dev.onelogin.com/oidc/2/token
openidconnect.profile-uri=https://bleusoft-dev.onelogin.com/oidc/2/me
openidconnect.issuer=https://openid-connect.onelogin.com/oidc
openidconnect.client-id=UPTAED
openidconnect.secret=UPDATED
openidconnect.scope=openid profile email
Unfortunately I'm not seeing any extra button for OIDC login. All i got i openId buttton with opendId input, but i doubt it's correlated as I it was there before I installed OIDC plugin.
Have you got any advice what to do now?
UPDATE
It turned out i had to click openId button and then sign in to get redirected. Thank you for your help
The OpenID that comes with Liferay v6.2.5 is not OpenID Connect. If you have OpenID enabled (Control Panel : Authentication : OpenID), you can uncheck it because you don't need it if you are using the marketplace plugin (oidc-hook). Just clicking "Sign In" should redirect you to your OpenID Connect provider login. Glad to help.
I have another problem, when i login through oidc I get too_many_redirects error. I'm not sure how to fix that one
if you look at Chrome devtools "Network" tab, can you see the url(s) it is stuck on ?
I changed oidc provider to Keyclock and now it's working
Thank you so much for your help
Thank you so much for your help
Good to hear. Glad to help.