oAuth

[FoksVHox]

I would love to see support for oAuth in Catchet. I know there are some other (closed) issues requesting the same functionality, but I think this would be a great addition for Catchet.

[jbrooksuk]

@FoksVHox what provider would you be interested in using?

[milliams]

This would be useful for us too. For us, specifically CachetHQ acting as an OIDC client/relying party would be good.

The way I've seen it work elsewhere would be either a config file on Cachet's side which maps identities (e.g. sub or email claims) coming from OIDC JWTs to ephemeral (or at least on-the-fly-generated) users in Cachet (including whether they are an admin or not); or some configured role map which reads claims coming from OIDC and uses that to decide access or admin status.

Specifically, we're using Keycloak as our OIDC IdP.

[FoksVHox]

@FoksVHox what provider would you be interested in using?

@jbrooksuk Personally I'd be interested in using Azure, as that is what we use for SSO at my company.