Oauth2 Confusion

VoIPRoute

I want to update my osTicket to 1.18 but I’m not quite sure I understand the impact of the Oauth2 on our implementation.

We host osTicket on our own VPS:
osTicket Version v1.17.5 (7c20036) — Up to date
Web Server Software LiteSpeed
MySQL Version 10.3.27
PHP Version 8.1.27

We only use addresses from our domain but I know I have clients that login and they are on Exchange using MS Office Apps. Could you shed some light on this for me?

KevinTheJedi

VoIPRoute

What exactly do you want to know? You can create an App Registration in Entra that would be Multitenant and Personal Accounts so that people within your org and anyone with a Microsoft account can login via Microsoft. Be careful though as this means anyone with a Microsoft account can login and create an account. The only way to limit the users is on the Microsoft side by the type of App Registration and/or the allowed users via the App Registration itself.

Cheers.

VoIPRoute

@KevinTheJedi Thanks for responding.

1) At a basic level I want to know if I am ONLY using an address at my domain, which is not associated with GMAIL or MS, nor SSO to login, do I need to have Oauth2 installed and enabled?

2) I really don't know what my clients IT environments are, I just don't want to prevent them from logging in they use a gmail address or a MS365 email address

KevinTheJedi

VoIPRoute

Oh then simply ignore OAuth2; you don’t need it by the sound of it. OAuth2 SSO is if you wanted to let your Users login via an external provider instead of creating a local osTicket account with a local password.

Your Users can instead just create a local osTicket account and login using those credentials. You can edit the Email Address field on the Contact Information form and set a custom REGEX validator with a REGEX statement that encompasses any email at your domain. That way when a User goes to create an account if they input an email other than your domain it will deny them.

Cheers.

VoIPRoute

@KevinTheJedi Thanks