Implementing SSO in Pimcore Asset Portal Engine

[Amarjeet664]

Hi folks,

Has anyone implemented SSO on Pimcore Asset Portal Engine?

Already implemented the same on backend but wanted to know if we can implement the same at frontend on the login screen of Asset Portal Engine?

Is it the same process as adding in the backend?

[fashxp]

There is out-of-the box support for openID connect SSO.
Besides that, there are Events https://pimcore.com/docs/platform/Portal_Engine/Development_Documentation/Customize_and_Extend_Behavior/Events#auth that should allow to integrate custom SSO solutions.

[fashxp]

Hi,
ad 1) Redirect url should be https://<YOUR_PORTAL_DOMAIN>/auth/oidc/endpoint
ad 2) There is no direct connection between these two
ad 3) Probably you need to setup two different apps on provider side
ad 4) I don't have experience with MS azure right now. But when the error message says scope groups does not exist, probably it is named differently in MS azure? Would be nice if you can share your experience then.

BR

[elements-team]

Hi,

We had a similar issue with openid through microsoft (openid connect) as you have to setup groups separately with this. as we didn't need group the solution for us was to disable the groups scope altogether (in the screenshot below we excluded groups from the scope). this way the user could login through openid

[EliShklovsky]

Hi
We are still struggling with no success with openid through MS Azure.
Is that configuration file was for the Admin or for the portal?
If we will configure the portal like that:

Would it act the same as with configuration file or should we explicitly create a conf file for the portal?
Thanks
Eli

[fashxp]

For portal engine, all SSO config takes place in the portal config in the document. there is no file for that...

[EliShklovsky]

@elements-team - In addition to @fashxp comment, could you please explain how did you manage to implement this using config file?
or did you do it on the Admin sso ?
Thanks
Eli