SSO fails with DSM sso server about planka

[meltyshev]

Hi! You are right, the problem is that your IDP doesn't support the profile scope, but Planka needs it to create an account (this scope contains a user name, which cannot be empty). Unfortunately we can't change anything on our side to solve this. I think there should be some way to add this scope to your IDP.

[halfu]

Thanks for your quick reply, I will dig into dsm synology system to get a solution then.
I will report back if I successed.

[daniel-hiller]

Hi,
as a dirty quickfix you do do this....
in server/api/helpers/users/get-or-create-one-using-oidc.js

change the folling lines

Line 36:
from if (!userInfo.email || !userInfo.name) {
to if (!userInfo.email || !userInfo.username) {

Line 56:
from name: userInfo.name,
to name: userInfo.username,

This change will set the username as name too, because of Synology does not support friendly names for users
At the moment it's not possible to change the name in Planka when OIDC is in use.

We will post an update with more options to configure OIDC and make the name changeable, if your sso provider does not support them.

[halfu]

Thanks A lot for your help. I have switched my sso server to authentik , and everything works great.
And I agree that give more options to configure OIDC in planka side is a good idea.

[halfu]

Since my problem sovled, I closed this issue.

[john8329]

Hi, I'm having the same issue with DSM, and I'd like for simplicity to use it instead of other solutions. Would it be possible to let the app tolerate the absence of the profile claim and just use username if it's missing?

Thanks a lot