The links to the applications should point directly to them, with no intermediate step

[SergioArbarviro]

Current state

The list of applications to which AlirPunkto gives access to currently is given as the list of URLs of the main page of the application. As a consequence, if these applications have other means to access them as the SSO that AlirPunkto feeds, the user needs to select the SSO as the entry point to acutally enter the application, which is not trivial to understand when s/he legitimately expects the click on the list provided by AlirPunkto to lead to the application itself.

Desired state

The click on the URL provided by AlirPunkto should lead directly to the "inside" of the application, after the login.

In order to achieve this, the links provided by AlirPunkto should be, for each application, the URLs of the login buttons using the SSO. In the specific case of the pilot case of implementing AlirPunkto, these URLs are:

• for NextCloud: https://workspace.cosmopolitical.coop/apps/sociallogin/custom_oidc/Keycloak;
• for Moodle: https://learn.cosmopolitical.coop/login/index.php - with a text informing the user that s/he needs to click on the "CosmoPolitical login" button;
• for Drupal: https://www.cosmopolitical.coop/user/login
• for LiquidFeedback: https://operationaldecisions.cosmopolitical.coop/index/index.html;
• for KuneAgi: to be determined once the connection of KuneAgi to the SSO has been implemented.

[micklamenace]

The Moodle url fails !

[ldidry]

The problem with the Moodle URL is the sesskey argument.

Unfortunately, it seems that this argument is required by Moodle, and is (obviously) modified each time you go to the login page.

[SergioArbarviro]

I hence propose for Moodle the following URL: https://learn.cosmopolitical.coop/login/index.php, with an additional text informing that the user should click on "CosmoPolitical login".

[SergioArbarviro]

I just changed the link for Drupal in the text of the issue. Please take the new one into consideration.

[SergioArbarviro]

I just changed the link for LiquidFeedback in the text of the issue. Please take the new one into consideration.

[SergioArbarviro]

I just changed the link and the text for Moodle in the text of the issue. Please take the new one into consideration.

[SergioArbarviro]

I have added the link and the text for SYMPA in the text of the issue. Please take the new one into consideration.

[michaellaunay]

The link to drupal fails

[michaellaunay]

Only the new Sympa link and operational decisions link are succeeding.

[SergioArbarviro]

I have modified the configuration of the Drupal site, and I tested it positively.

@michaellaunay Please confirm that using the URL as indicated in the text of the issue leads the user directly to the main page of the presentation website.

[michaellaunay]

Links that work : https://workspace.cosmopolitical.coop/apps/sociallogin/custom_oidc/Keycloak https://www.cosmopolitical.coop/mo_login (but with a message on the page) https://lists.cosmopolitical.coop/sympa https://operationaldecisions.cosmopolitical.coop/

Links that don't work : https://learn.cosmopolitical.coop/login/index.php

Not yet implemented : https://operationaldecisions.cosmopolitical.coop/

I propose switching login and sso_login to make sso_login the default login method.

[ldidry]

As a said in a mail, https://workspace.cosmopolitical.coop/apps/sociallogin/custom_oidc/Keycloak can’t be used because if you go to that URL while being already logged in Nextcloud, you got an error message.

[ldidry]

For information: there is a setting in NC’s Social login app to hide the default login form, allowing to get this login screen, which is less confusing for users:

The login form is still accessible by clicking the link below the button.

[ldidry]

And I found a setting for Social login: 'social_login_auto_redirect' => true.

So we could just use https://workspace.cosmopolitical.coop as NC’s URL.

And to use the login form, you just have to add ?noredir=1 to https://workspace.cosmopolitical.coop/login.

Should I activate the setting?

[michaellaunay]

I changed the workspace link to https://workspace.cosmopolitical.coop and that works.

[SergioArbarviro]

I have activated the setting in the Social Login app of NextCloud that "hides the default login" - hence having the default login page be that displayed on https://github.com/michaellaunay/alirpunkto/issues/142#issuecomment-2203596395

@ldidry Please activate that setting that you mention in https://github.com/michaellaunay/alirpunkto/issues/142#issuecomment-2203623404

[ldidry]

@SergioArbarviro Setting activated.

[SergioArbarviro]

After having seen how it works, I prefer to keep it without this automatic redirection. Seeing the login page of the Worskspace website confirms to the user that s/he is at the right place.

@ldidry Please revert to the original setting = without the redirection.

[ldidry]

Setting deactivated.