Allow Slack users to login to Nextcloud via OpenID

Hey wise Nextcloud community,

I have a non-profit with about 120 members which already have a Slack user.
We now also have a managed nextcloud (Hetzner NX11) where all those users should be able to connect.
I read that that such things can be done via OpenID. I found this plugin which sounds promesing but I’am very confused how this is done + chatgpt says I need a keycloak in between.

Is there a guide somewhere which describes how to do that (without keycloak?)

I’am thankful for every hint!

Its easier to that up with oauth. openid requires an openid backend.

that app is one way

According to their website they support openidconnect

The platform feature was recently upgraded to be compatible with the standard OpenID Connect specification.
from: Sign in with Slack (OpenID Connect) | Java Slack SDK

be aware oidc_login-app is not actively maintained anymore State of the maintainance · Issue #182 · pulsejet/nextcloud-oidc-login · GitHub I would recommend to use OpenID Connect user backend user_oidc-app from Nextcloud core team.

for me it looks like you can use Slack as IdP without any additional applications Sign in with Slack setup | Slack

1 Like

If slack supports openid native i agree that nextclouds own is much better :slight_smile:

1 Like

thank you all so much!

I tried GitHub - zorn-v/nextcloud-social-login but was not successful.

With user_oidc-app::tag it it now working like a charm!

Two small things are open to me:

  • I’ve configured these scopes “openid email profile” (in Nextcloud pluin + in SLACK App). But somehow the profile picture is not visible in Nextcloud.
  • How to I set a default group for new registered users? I’ve seen the group setting of the plugin but I don’t understand how it works :slight_smile:

If slack backend can handle group claims from openid groups would automatically be added to nextcloud and users provisioned to those groups.

This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.