docassemble icon indicating copy to clipboard operation
docassemble copied to clipboard

Feature request: disable native DA login when using Auth0

Open NieldSWND opened this issue 3 years ago • 2 comments

I'm using Docassemble in a SSO configuration with Auth0 and Wordpress. I'd like to be able to direct users who have already authenticated on the Wordpress site to the "myDAsite.com/interviews" URL without forcing them through the sign-on process a second time. I can do this by sending them to the "https://myDAsite.com/authorize/auth0?next=https%3A%2F%2FmyDAsite.com%2Finterviews" Auth0 login URL -- but it would be easier (and preferable, given my configuration) if I could disable the native Docassemble signup/login page and just rely on Auth0 -- despite the risks identified in the documentation.

Thank you for considering this feature request!

NieldSWND avatar Aug 15 '22 17:08 NieldSWND

Have you tried setting password login: false? Do you need more than this? https://docassemble.org/docs/config.html#password%20login Totally disabling password login could lock an administrator out of their account.

jhpyle avatar Aug 15 '22 17:08 jhpyle

I suspect that if the browser is redirected to docassemble after authenticating on the Auth0 web site, then the process of logging into docassemble using Auth0 will be easy because Auth0 already recognizes the browser session. But I guess that still requires users to click an extra button, which you want to avoid. Anyway, I don't know if Auth0 supports any type of login-through-URL feature. I could look into it.

jhpyle avatar Aug 15 '22 17:08 jhpyle

Closing this because of lack of activity.

jhpyle avatar Dec 03 '23 20:12 jhpyle