From cf136937a39453348dbf8289a70df6b878aa0d33 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?St=C3=A9phane=20Brunner?= <stephane.brunner@camptocamp.com>
Date: Fri, 11 Oct 2024 16:20:48 +0200
Subject: [PATCH] Configure the OIDC authentication

---
 geoportal/vars.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/geoportal/vars.yaml b/geoportal/vars.yaml
index cf98a8e66..22b394b85 100644
--- a/geoportal/vars.yaml
+++ b/geoportal/vars.yaml
@@ -741,6 +741,18 @@ vars:
     user: '{SMTP_USER}'
     password: '{SMTP_PASSWORD}'
 
+  authentication:
+    openid_connect:
+      enabled: true
+      url: https://sso.geomapfish-demo.prod.apps.gs-ch-prod.camptocamp.com
+      client_id: '288833770369390672'
+      query_user_info: True
+      create_user: True
+      match_field: email
+      update_fields:
+        - username
+        - display_name
+
   intranet:
     networks:
       - 172.18.0.1/16