DHIS2 OAuth Grant type authorized_code

HI all

Is there a way in DHIS2 that allows defining a callback for OAuth? If this
possible, we can have multiple dhis2 instances that share a single user
base. This will work like OAuth in Google+ or Facebook.

Thanh

Hi Thanh

I’m not really sure what you want. DHIS 2 can only act as a authentication provider, it does not support authentication against another oauth2 provider.

The main reason for adding oauth2 was to support third party clients connecting with it without having to collect username/passwords in their own local databases.

···

On Tue, Dec 15, 2015 at 3:34 PM, Ngoc Thanh Nguyen thanh.hispvietnam@gmail.com wrote:

HI all

Is there a way in DHIS2 that allows defining a callback for OAuth? If this possible, we can have multiple dhis2 instances that share a single user base. This will work like OAuth in Google+ or Facebook.

Thanh


Morten

Hi

What I mean was if I have 3 dhis2 instances running on 3 server namely A, B, C. All user accounts (and passwords) are stored in C.

When I access A or B, it will redirect to C for sign in. After signing in successfully, I can use A or B.

Is that possible?

···

On Fri, Jan 8, 2016 at 12:58 PM, Morten Olav Hansen mortenoh@gmail.com wrote:

Hi Thanh

I’m not really sure what you want. DHIS 2 can only act as a authentication provider, it does not support authentication against another oauth2 provider.

The main reason for adding oauth2 was to support third party clients connecting with it without having to collect username/passwords in their own local databases.

Thanh


Morten

On Tue, Dec 15, 2015 at 3:34 PM, Ngoc Thanh Nguyen thanh.hispvietnam@gmail.com wrote:

HI all

Is there a way in DHIS2 that allows defining a callback for OAuth? If this possible, we can have multiple dhis2 instances that share a single user base. This will work like OAuth in Google+ or Facebook.

Thanh

No, that is not possible. The only way to externally authenticate a DHIS 2 instance is either using openid or using LDAP (now supported in 2.22).

···

On Fri, Jan 8, 2016 at 1:08 PM, Ngoc Thanh Nguyen thanh.hispvietnam@gmail.com wrote:

Hi

What I mean was if I have 3 dhis2 instances running on 3 server namely A, B, C. All user accounts (and passwords) are stored in C.

When I access A or B, it will redirect to C for sign in. After signing in successfully, I can use A or B.

Is that possible?


Morten

Thanh

On Fri, Jan 8, 2016 at 12:58 PM, Morten Olav Hansen mortenoh@gmail.com wrote:

Hi Thanh

I’m not really sure what you want. DHIS 2 can only act as a authentication provider, it does not support authentication against another oauth2 provider.

The main reason for adding oauth2 was to support third party clients connecting with it without having to collect username/passwords in their own local databases.


Morten

On Tue, Dec 15, 2015 at 3:34 PM, Ngoc Thanh Nguyen thanh.hispvietnam@gmail.com wrote:

HI all

Is there a way in DHIS2 that allows defining a callback for OAuth? If this possible, we can have multiple dhis2 instances that share a single user base. This will work like OAuth in Google+ or Facebook.

Thanh

Wow, LDAP is great.

···

On Fri, Jan 8, 2016 at 1:10 PM, Morten Olav Hansen mortenoh@gmail.com wrote:

No, that is not possible. The only way to externally authenticate a DHIS 2 instance is either using openid or using LDAP (now supported in 2.22).

I think this is a revolution which brings DHIS2 to a truly integration platform.

Will try that

Thanh


Morten

On Fri, Jan 8, 2016 at 1:08 PM, Ngoc Thanh Nguyen thanh.hispvietnam@gmail.com wrote:

Hi

What I mean was if I have 3 dhis2 instances running on 3 server namely A, B, C. All user accounts (and passwords) are stored in C.

When I access A or B, it will redirect to C for sign in. After signing in successfully, I can use A or B.

Is that possible?

Thanh

On Fri, Jan 8, 2016 at 12:58 PM, Morten Olav Hansen mortenoh@gmail.com wrote:

Hi Thanh

I’m not really sure what you want. DHIS 2 can only act as a authentication provider, it does not support authentication against another oauth2 provider.

The main reason for adding oauth2 was to support third party clients connecting with it without having to collect username/passwords in their own local databases.


Morten

On Tue, Dec 15, 2015 at 3:34 PM, Ngoc Thanh Nguyen thanh.hispvietnam@gmail.com wrote:

HI all

Is there a way in DHIS2 that allows defining a callback for OAuth? If this possible, we can have multiple dhis2 instances that share a single user base. This will work like OAuth in Google+ or Facebook.

Thanh

Yes, you can find the documentation here:
http://dhis2.github.io/dhis2-docs/master/en/implementer/html/ch08s05.html

···

On Fri, Jan 8, 2016 at 1:19 PM, Ngoc Thanh Nguyen thanh.hispvietnam@gmail.com wrote:

Wow, LDAP is great.


Morten

I think this is a revolution which brings DHIS2 to a truly integration platform.

Will try that

Thanh

On Fri, Jan 8, 2016 at 1:10 PM, Morten Olav Hansen mortenoh@gmail.com wrote:

No, that is not possible. The only way to externally authenticate a DHIS 2 instance is either using openid or using LDAP (now supported in 2.22).


Morten

On Fri, Jan 8, 2016 at 1:08 PM, Ngoc Thanh Nguyen thanh.hispvietnam@gmail.com wrote:

Hi

What I mean was if I have 3 dhis2 instances running on 3 server namely A, B, C. All user accounts (and passwords) are stored in C.

When I access A or B, it will redirect to C for sign in. After signing in successfully, I can use A or B.

Is that possible?

Thanh

On Fri, Jan 8, 2016 at 12:58 PM, Morten Olav Hansen mortenoh@gmail.com wrote:

Hi Thanh

I’m not really sure what you want. DHIS 2 can only act as a authentication provider, it does not support authentication against another oauth2 provider.

The main reason for adding oauth2 was to support third party clients connecting with it without having to collect username/passwords in their own local databases.


Morten

On Tue, Dec 15, 2015 at 3:34 PM, Ngoc Thanh Nguyen thanh.hispvietnam@gmail.com wrote:

HI all

Is there a way in DHIS2 that allows defining a callback for OAuth? If this possible, we can have multiple dhis2 instances that share a single user base. This will work like OAuth in Google+ or Facebook.

Thanh