Some feedback

[hardcodet]

Hi there

First of all: Thanks for writing that plugin! I'm in the process of setting up Dokuwiki for our startup, and integration with our auth system (Keycloak) was a breeze. I think the plugin could benefit from a few simple challenges though - I'll just put them in as a bullet list :)

• If we select just one auth provider (Keycloak) in our case, the login button in the header says "Login with Keycloak". This might make sense for an engineer, but it'll just confuse our users. They do not know what KC is, and they don't care. After all, pressing the button just brings them to our company login page where they put in their usual credentials. The login button should still just say "Log in" IMO.
• I disabled registration in Dokuwiki because otherwise, people outside the company could just register and then access our wiki. Unfortunately, that also disables auto-registration after a first-time OAUTH login of a new user (error Self-Registration is currently disabled or conf/users.auth.php is not writable).
  • This sort of renders the (awesome!) feature of limiting logins to specific domains pretty much useless - after all, we would have to create our users manually (where we already have control over whom we register)
  • That being said: Limiting by domain should be an inherent feature of registration IMO. That would make Dokuwiki immediately accessible for companies, and it should be a trivial feature to implement (for a PHP dev at least ;).
• Logging out of Keycloak seems to be broken as already reported.

Thanks again and keep up the great work! Philipp

[emieza]

Totally agree with @hardcodet for the 2n point. It should be possible to enable OAuth registration (domain) WITHOUT enabling classical site acl registration.

Any ideas for a workaround?

[zabarabab]

I think the second point is fixed with #75