OAuth with Google Apps for Domains

jdelisle

I've got the OAuth plugin installed, and have the Google Apps side taken care of (I use OAuth to authenticate my users on things like WordPress, so I know it's working there).I try to log-in to osTicket as an Agent by clicking the "Sign in with Google" icon, and I'm told: "Have your administrator create a local account".I've tried creating a local account for the user, and I set the email address to the Google Apps for Domains email address (ie: it's not @[deleted], it's @[deleted]). I set the Username to the first portion of the email address (ie: I use "john" for a user "john@ourdomain.com"). That didn't help. So, I tried setting the Username to the full email-address, and that didn't help either. How do I get osTicket/OAuth to correctly see that I have local accounts for my Google Apps for Domains users?

Chefkeks

Unfortunately haven't yet played with the OAuth plugin, but maybe some other users have and can assist here.All I can provide are some links which hopefully help:https://github.com/osTicket/core-plugins/issues/58http://forum.osticket.com/d/discussion//howto-configure-the-oauth2-pluginhttp://www.webpreprod.com/issue/utiliser-protocole-oauth-20-osticket-se-connecter-compte-google-facebook

ntozier

To add to what @[deleted] has already saidThere are four official plugins.Authentication :: LDAP and Active DirectoryAuthentication :: HTTP Pass-ThroughStorage :: Attachments on the FilesystemStorage :: Attachments in Amazon S3see: http://osticket.com/downloadWhile there are other plugins available on github that does not mean that they have been tested or found to be working very well for any version of osTicket other than the one that they were written for. How do you know what version they were written for? Great question, and one that I do not have an answer for.Please help us to help you by reading and following the posting guidelines located in this thread: Please read before requesting assistance. The more information you give us the better we will be able to assist you. Thank you.

jdelisle

Thanks ntozier and Chefkeks. I retrieved the OAuth plugin from osticket.com/download-edge as a PHAR file, so I assumed it was "legit".Anyhow, I've decided to steer clear of it since it sounds like it's maybe not ready for prime-time, and I've moved to LDAP.In case someone googling finds this, and wants to get Google Apps for Domains authentication working with osTicket, the easiest solution I found was to use a third-party IDaaS/ DaaS service, use them to manage my cloud-based identities, and have them sync to Google Apps. I did this so I could expose the IDs via LDAP without needing to run my own LDAP server. Then, I enable LDAP on that service, install the LDAP plugin on osTicket, and point it at that service. I ended up using JumpCloud, and it's working great! They offer LDAP and free use for a small number of users, and have nicely documented LDAP configs. It's working really well.