Publik

Presentation

Publik is an open-source citizen relationship management tool.

See the official Publik website for a complete presentation.

It feature an OpenID Connect login that work with LemonLDAP::NG.

Configuring Publik

Connect to your publik instance authentic2 webui with an Admin user, in the admin panel, go to “Authentic2_Auth_Oidc” › “Oidc providers”.

Click on “Add Oidc Provider”.

• Name : LemonLDAP SSO

• Short id : lemonldap

• Provider : https://auth.example.com/

• Client id : clientid

• Client secret : secret

• Authorization endpoint : https://auth.example.com/oauth2/authorize

• Token endpoint : https://auth.example.com/oauth2/token

• Userinfo endpoint : https://auth.example.com/oauth2/userinfo

• End session endpont : https://auth.example.com/oauth2/logout

• WebKey JSON : Copy/Paste the content of https://auth.example.com/oauth2/jwks

• Claims Enabled : yes

• Show on connection page : yes

Strategy and Collectivity can be configured based to your needs.

OIDC Claim mappings can be configured based on your needs.

Configuring LemonLDAP

We now have to configure LemonLDAP::NG to recognize publik as a valid OIDC relying party.

Add a new OpenID Connect relying party with the following parameters (Options -> Basic) :

• Client ID: the same you set in Publik configuration.

• Client Secret: the same you set in Publik configuration.

• Allowed redirection addresses for login: The “Callback URL” for authentic2 : https://authentic2-instance/accounts/oidc/callback/

And in Options -> Logout

• Allowed redirection addresses for logout: The “Logout URL” for authentic2 : https://authentic2-instance/logout/