thor-it / thor-sso

FOSS IdentityServer4 solution for single-sign-on of the rugby club SRC Thor.
MIT License
2 stars 1 forks source link

Client to dynamic external IDP mapping #14

Open davidzwa opened 3 years ago

davidzwa commented 3 years ago

Thinking about dynamic (persistence based) configuration of external configuration providers (per client even?). https://github.com/Aguafrommars/DymamicAuthProviders

With IdentityServer4 you can provide secrets and config for static identity providers(Google, Google OAuth, Hotmail, Github etc). For a real multi-tenancy setup we'd need this to be non-static and unconditional for a single application (so no 'conditions' in the application construction, but conditions determining the set of external authentications on-the-fly).

I presume this has advantages, but also bugs/errors and more research to be done to make it suitable for Thor/RSRC/future clubs.

Advantage known so far:

Disadvantages:

davidzwa commented 3 years ago

This solution seems to work. Now need to provide proper database seeding as the package does not take care of this. Also need to build proper management API and MVC for it to configure it by admin roles.

When a new tenant is made the option for configuring a ID4 domain should be possible.