authentication.yaml

Authentication methods

Chamilo 2 supports a number of authentication methods, which have to be defined (given the high security requirements of this feature) inside the config/authentication.yaml file. This file can be updated in more recent versions of Chamilo through the template authentication.dist.yaml.

The authentication.yaml file uses the YAML syntax and parameters specific to each authentication method, so it might be a little tricky to configure. This page intends to reduce this difficulty by explaining all settings.

The parameters group

Access URL ID group

Authentication methods

The authentication hash contains the default level which then contains each authentication method.

generic

            generic:
                enabled: false
                title: 'External'
                client_id: ''
                client_secret: ''
                provider_options:
                    urlAuthorize: ''
                    urlAccessToken: ''
                    urlResourceOwnerDetails: ''
                    responseResourceOwnerId: 'sub'
                allow_create_new_users: true
                allow_update_user_info: false
                resource_owner_username_field: null
                resource_owner_firstname_field: null
                resource_owner_lastname_field: null
                resource_owner_email_field: null
                resource_owner_status_field: null
                resource_owner_teacher_status_field: null
                resource_owner_sessadmin_status_field: null
                resource_owner_hr_status_field: null
                resource_owner_status_status_field: null
                resource_owner_anon_status_field: null
                resource_owner_urls_field: null

facebook

            facebook:
                enabled: false
                title: 'Facebook'
                client_id: ''
                client_secret: ''
                #graph_api_version: 'v20.0'

keycloak

            keycloak:
                enabled: false
                title: 'Keycloak'
                client_id: ''
                client_secret: ''
                auth_server_url: ''
                realm: ''
                #version: ''

azure

            azure:
                enabled: false
                title: 'Azure'
                client_id: ''
                client_secret: ''