-
Notifications
You must be signed in to change notification settings - Fork 53
Description
Hello,
with the OIDC module, it's now possible to log into Group-Office via OIDC provider, such as Keycloak. However, after such login, user is requested to insert his password if he wants to access his emails on a remote email server.
To get rid of this password request, Group-Office should support xoauth2 to enable SSO also for user's mailbox.
Here are some resources when I was configuring this for Roundcube: Keycloak -> Roundcube -> Dovecot -> Postfix
https://doc.dovecot.org/2.4.2/core/config/auth/databases/oauth2.html
https://github.com/roundcube/roundcubemail/wiki/Configuration%3A-OAuth2
https://documentation.open-xchange.com/8/middleware/mail/dovecot/oauth_2.0_with_postfix_and_dovecot.html
https://integrations.goauthentik.io/chat-communication-collaboration/roundcube/
https://www.authelia.com/integration/openid-connect/clients/roundcube/