Will this plugin compatible with GLPI 11 ?

[fgendorf]

Hi, thanks for this awesome project, do you think make it compatible with GLPI 11 ?

Thanks for advanced

[SamSeriously]

Does not seem to work after update, had to remove the plugin :(

[avignat]

Any alternatives ?

[jimmygruau]

Hello, the plugin is great, but have you found a solution for GLPI 11?

[edgardmessias]

Hello every one, I am really busy with another job, as soon as possible, I will try to update it, but I am not using GLPI, so be patient.

Pull requests are welcome

[Killian-Aidalinfo]

Hello,

I’m currently working on a patch for GLPI 11, but I don’t know PHP at all, and the plugin upgrade process is very poorly documented if not completely undocumented by GLPI.

Here’s a functional plugin, but the login button looks terrible, sorry about that. I’ll work on it on Monday.

You can find the plugin for GLPI 11 here:
👉 https://github.com/aidalinfo/glpi-singlesignon/releases/download/1.5.0/glpi-singlesignon-1.5.0.tar.bz2

In the Microsoft/Google OAuth application, you need to replace your callback url :

/plugins/singlesignon/front/callback.php/provider/1

with

/plugins/singlesignon/front/callback.php?provider=1

[Killian-Aidalinfo]

@edgardmessias If I can already submit the pr to you, it will make your job easier.

But I would like to do it with the correct frontend.

As you wish!

[Killian-Aidalinfo]

Hi @edgardmessias please check #141

[edgardmessias]

Hello @Killian-Aidalinfo , a big thank you for sending a PR. I will review it today, trying to generate a new release.

About the callback URL, I can't remember, but there are some providers that don't accept to put query string in the URL, because of that I had encoded it into main URL.

[Killian-Aidalinfo]

Hello @Killian-Aidalinfo , a big thank you for sending a PR. I will review it today, trying to generate a new release.

About the callback URL, I can't remember, but there are some providers that don't accept to put query string in the URL, because of that I had encoded it into main URL.

I pushed another commit with a version that supports it now.
So we can keep /provider/1.

Thank's ! Feel free to ping me if you have any questions

[rdrouche]

Hi @Killian-Aidalinfo

I just tested your plugin. Thank you very much for taking over. I managed to get it to work without any issues with Authentik. There are a few bugs, at least two for now:

• In the configuration, there's no button to add a provider; I had to enter the name of the PHP file directly to access the form.
• Second, when the plugin is activated, you can no longer access user details.

Compile Error: Could not check compatibility between GlpiPlugin\Singlesignon\Preference::getTabNameForItem(GlpiPlugin\Singlesignon\CommonGLPI $item, $withtemplate = 0) and CommonGLPI::getTabNameForItem(CommonGLPI $item, $withtemplate = 0), because class GlpiPlugin\Singlesignon\CommonGLPI is not available
In ./plugins/singlesignon/src/Preference.php(89)
#0 {main}

Thank

[Killian-Aidalinfo]

Hi @rdrouche thanks for your feedback, I'll check that tomorrow!

[Killian-Aidalinfo]

Hi @rdrouche you can use this version : https://github.com/aidalinfo/glpi-singlesignon/releases/download/1.5.1/glpi-singlesignon-1.5.1.tar.bz2

This bug has been fixed. If you have any other issues, ping me :)

[shmsh9]

Hi thanks for the patches. I have found some issues:

When a user has no picture syncOauthPhoto crashes because the curl request has this return

{"error":{"code":"ImageNotFound","message":"Exception of type 'Microsoft.Fast.Profile.Core.Exception.ImageNotFoundException' was thrown.","innerError":{"date":"2025-10-24T09:06:07","request-id":"XXXX","client-request-id":"XXXX"}}}

quick fix for src/Provider.php:

--- a/src/Provider.php
+++ b/src/Provider.php
@@ -1493,7 +1493,7 @@ class PluginSinglesignonProvider extends CommonDBTM {
             CURLOPT_SSL_VERIFYHOST => false,
             CURLOPT_SSL_VERIFYPEER => false,
          ]);
-         if (!empty($img)) {
+         if (!empty($img) && !str_starts_with($img, '{"error"')) {
             /* if ($this->debug) {
             print_r($content);
             } */

Also SSO auth of ldap users is broken and I have not found a way to fix it yet.
Glpi's src/Auth.php: validateLogin() now tries to authenticate the user with the temporary password from src/Provider.php which obvously wont work

$tempPassword = bin2hex(random_bytes(64));

Update:

this fixes LDAP users but I don't know if there was side effects since it is commented upper ?
src/Provider.php

   if($user->fields['authtype'] === Auth::LDAP){
            $auth = new Auth();
            $auth->user = $user;
            $auth->auth_succeded = true;
            $auth->extauth = 1;
            $auth->user_present = 1;
            $auth->user->fields['authtype'] = \Auth::DB_GLPI;
            \Session::init($auth);
            return $auth->auth_succeded;
      }

[Killian-Aidalinfo]

Hi @shmsh9, thank you for your feedback and for addressing some of the bugs. I’ve merged your changes, can you please verify that everything is working properly? https://github.com/aidalinfo/glpi-singlesignon/releases/tag/1.5.1-alpha-02

[shmsh9]

Thank you @Killian-Aidalinfo everything does work !
The last "issue" I have is the previous version had the sso login without pressing the button when it was set as the default auth mode.
Right know I have this patch to do it since the old Html::redirect does not work anymore but it feels very hacky :

--- a/singlesignon/src/LoginRenderer.php
+++ b/singlesignon.bak/src/LoginRenderer.php
@@ -5,7 +5,6 @@ declare(strict_types=1);
 namespace GlpiPlugin\Singlesignon;

 use Glpi\Application\View\TemplateRenderer;
-
 class LoginRenderer
 {
     public static function display(): void
@@ -35,7 +34,10 @@ class LoginRenderer
                 'picture' => $row['picture'] ? Toolbox::getPictureUrl($row['picture']) : null,
             ];
         }
-
+       if(!isset($_GET['noAUTO']) && $row['is_default']){
+           echo "<script>window.location='$url';</script>";
+           return;
+       }
         if (empty($buttons)) {
             return;
         }