Hello,
I am trying to use the OpenID Connect Authenticator extension on my wiki. It seems that this extension allows wiki users to select an OIDC provider via a URL query parameter.
For example:
https://mywikidomain/bin/login/XWiki/XWikiLogin?oidc.provider=https://providerdomain
Is there a way to restrict the providers that users can choose? If users can freely select a provider, they may create multiple accounts, making user management difficult. It would be better to ignore the query parameter value and only apply the values set in the XWiki object or xwiki.properties.
5 posts - 2 participants