Discourse + Auth0

Auth0 is an authentication broker that supports social identity providers as well as enterprise identity providers such as Active Directory, LDAP, Office365, Google Apps, Salesforce.

---

Discourse is an open source forum software.

---

This is a discourse plugin to do Single Sign On using Auth0.

Demo: https://ask.auth0.com

What do I get by using Auth0?

• Support for Active Directory / LDAP (see animated gif)
  • No matter if Discourse is on the cloud or on-prem, it will work transparently
  • Support for Kerberos too (configured by IP ranges)
• Support for other enterprise logins like SAML Protocol, Windows Azure AD, Google Apps, Salesforce, etc. All supported here: https://docs.auth0.com/identityproviders.
• Support for social providers without having to add OmniAuth strategies by hand. Just turn on/off social providers (see animated gif)
• Support for Single Sign On with other Discourse instances and any other application in your account (see animated gif.

Installation

1. Create an account on Auth0 and register a new Rails application.

2. Run in your discourse root folder:

   git clone https://github.com/auth0/discourse-plugin.git plugins/auth0

3. Not sure why, but Discourse and/or ruby likes to cache javascript assets. Please stop rails and execute the following command bundle exec rake assets:clean && rm -rf tmp/cache/assets/ before continuing.

4. Login as an adminstrator to your discourse setting using one of the pre-existing auth plugins.

5. Configure the Auth0 plugin in the admin section

̇

Enjoy!

---

Adding Active Directory / LDAP

Adding Social Providers

Single Sign On Between multiple Discourse forums

Single Sign On with Windows Authentication

Using Discourse Login Dialog instead of Auth0

You can keep using Discourse Login dialog and integrate only a specific connection from Auth0. It will show up as another button like the social providers.

Go to admin site settings for Auth0 and change the auth0_connection with the connection name you want to use from Auth0.

TODO

• Add a plugin UI on the Admin section ot configure the secrets, etc.
• Add support for using Discourse Login user/password input to call Auth0 on AD/LDAP connections using auth0.js

License

MIT - 2014 - AUTH0, INC.