Ask Questions and Find Answers
Important:
Ask is now read-only. You can review any existing questions and answers, but not add anything new.
But - don't panic! While ask is no more, we've replaced it with discuss - the new Liferay Discussion Forum! Read more here here or just visit the site here:
discuss.liferay.com
RE: [OpenId] Redirect directly on provider when not logged
Hello,
The need :
Redirect user directly on OpenId Provider Page when user isn't logged and when the OpenId configuration is enabled.
It was possible to do it with Private Page (deprecated feature), now we need to implements a servlet filter to respond to this need ... and it's not available on LXC.
(How : https://help.liferay.com/hc/en-us/articles/4407989179661-How-to-Redirect-to-OpenID-Connect-Page-after-clicking-the-Sign-In-Button with no public page)
Is it possible to add a configuration on OpenId to enabled/disabled this feature.
Best Regards,
Florian
Hi Florian,
Would you not be able to do in the same way as you do with a private page but with using a permission restricted page instead?
Regards,
Zsigmond
Hello Zsigmond,
No it's not or we don't know how to do this, cf ticket https://help.liferay.com/hc/en-us/requests/124408
Best Regards,
Florian
Hi Florian,
Could you please describe how you solved it with a private page?
Thanks,
Zsigmond
When you don't have a public page you are redirected on Open Id Provider Page.
And adding this property :
auth.login.url=/home/-/login/openid_connect_request?p_p_state=maximized&_com_liferay_login_web_portlet_LoginPortlet_saveLastPath=false&_com_liferay_login_web_portlet_LoginPortlet_redirect=/&_com_liferay_login_web_portlet_LoginPortlet_OPEN_ID_CONNECT_PROVIDER_NAME=OpenId
Change OpenId by OpenId configuration provider name
Hi Florian,
Then I guess you want the users to be redirected to there in each case when they hit a restricted resource, right?
If so, why doesn't it work now, without the private pages?
I need more details to understand the real problem. Could you please describe the whole use case?
Thanks.
Zsigmond
Hello Zsigmond,
Without the private pages feature when accessing the site we are redirected to the liferay authentication screen.
When clicking on the sign in button we are redirected to the provider open id authentication with the auth.login.url set to the OpenId configuration (https://help.liferay.com/hc/en-us/articles/4407989179661-How-to-Redirect-to-OpenID-Connect-Page-after-clicking-the-Sign-In-Button). Otherwise the user is redirected to the login portlet with the possibility to authenticate via login password or to select a Provider Open Id.
The need is when accessing the site if the user is not logged in and the open id is enabled, to have the possibility to redirect the user directly to the provider authentication url. As mod_auth_openidc would do on an apache for OpenId authentication.
Best Regards,
Florian
Hi Florian,
What is the target when you access the site? Is that a regular page? If so, have you configured the page already so that it needs authentication to access?
Regards,
Zsigmond
Powered by Liferay™