Sample OpenConnectID(ODIC) JSON script to enable SSO via Azure AD

Here's what I use for testing OIDC with Keycloak — and you'll need to change most fields, to match the URLs over at Azure AD.

Edit 2020-12-15: Added the emailVerifiedDomains field — Azure AD is a bit specail; it doesn't send the email_verified OIDC standard claim.

This: "emailVerifiedDomains": "your.company.com" makes Talkyard assume emails like someone@your.company.com have been verified somehow — for example, the company hands out company email addresses only to its employees.

  {
  "id": 1,
  "protocol": "oidc",
  "alias": "keycloak_test_alias",
  "displayName": "Keycloak Test",
  "description": "OpenID Connect login test at keycloak.localhost:8113",
  "enabled": true,
  "trustVerifiedEmail": true,
  "emailVerifiedDomains": "your.company.com",
  "syncMode": 1,
  "oauAuthorizationUrl": "http://keycloak.localhost:8113/auth/realms/ty_test_realm/protocol/openid-connect/auth",
  "oauAuthReqScope": "openid",
  "oauAccessTokenUrl": "http://keycloak.localhost:8113/auth/realms/ty_test_realm/protocol/openid-connect/token",
  "oauClientId": "ty_test_client",
  "oauClientSecret": "THE_SECRET_YOU_COPIED",
  "oauIssuer": "http://keycloak.localhost:8113/auth/realms/ty_test_realm",
  "oidcUserInfoUrl": "http://keycloak.localhost:8113/auth/realms/ty_test_realm/protocol/openid-connect/userinfo"
 }

I didn't write auto tests for verifying that OIDC + Talkyard continues working properly, and I'm thinking maybe I should do that, before posting moer officially here about OIDC. But anyway feel free to try it out :- ) and it'd be interesting to hear about any problems you run into. I'll link to this from the chat too

B.t.w. here are step by step instructions for creating a Keycloak realm (should be corresponding steps in Azure AD I'd think) and connecting with Talkyard via OIDC:

Hi,

Thanks for quick response on all the queries.
I have another question related to SSO authentication. We have setup SSO authentication successfully.
When a user tries to login via SSO to talkyard for the first time talkyard sends a verification mail to users asking them to authenticate.
Can we disable this feature to ensure that no authentication mail is being send when a user logs in via SSO authentication for the first time.