These CKAN Versions are exactely matched:

• 2.10.0
• 2.10.1
• 2.10.2
• 2.10.3
• 2.10.4
• 2.10.5
• 2.10.6
• 2.10.7
• 2.10.8
• 2.10.9
• 2.11.0
• 2.11.1
• 2.11.2
• 2.11.3
• 2.11.4
• 2.12.0
• 2.7.0
• 2.7.1
• 2.7.10
• 2.7.11
• 2.7.12
• 2.7.2
• 2.7.3
• 2.7.4
• 2.7.5
• 2.7.6
• 2.7.7
• 2.7.8
• 2.7.9
• 2.8.0
• 2.8.1
• 2.8.10
• 2.8.11
• 2.8.12
• 2.8.2
• 2.8.3
• 2.8.4
• 2.8.5
• 2.8.6
• 2.8.7
• 2.8.8
• 2.8.9
• 2.9.0
• 2.9.0a
• 2.9.1
• 2.9.10
• 2.9.11
• 2.9.13
• 2.9.2
• 2.9.3
• 2.9.4
• 2.9.5
• 2.9.6
• 2.9.7
• 2.9.8
• 2.9.9

ckanext-sso

OpenID Connect plugin for CKAN used by the B.C. Data Catalogue.

Currently only supports Keycloak.

Features

• Keycloak-based Single Sign-On (SSO) authentication
• Bearer token support for CKAN REST API access
• Auto-creation of CKAN users for corresponding Keycloak users
• Original CKAN auth works alongside SSO
• Users are added to organizations based on Keycloak group memberships
• Sysadmin group assignment via Keycloak groups

Requirements

• CKAN 2.7+
• Keycloak identity provider

Installation

To install ckanext-sso:

1. Activate your CKAN virtual environment.
2. Clone the source and install it: git clone https://github.com/bcgov/ckanext-sso.git cd ckanext-sso pip install -e .
3. Add sso to the ckan.plugins setting in your CKAN config file.
4. Configure the Keycloak settings in your CKAN config.

Config settings

ckan.sso.authorization_endpoint = <keycloak auth endpoint>
ckan.sso.realm = <keycloak realm>
ckan.sso.client_id = <client id>
ckan.sso.client_secret = <client secret>
ckan.sso.sysadmin_group_name = <group name for sysadmins>
ckan.sso.profile_group_field = <field for group membership>
ckan.sso.profile_username_field = <field for username>
ckan.sso.profile_email_field = <field for email>
ckan.sso.profile_fullname_field = <field for display name>
ckan.sso.profile_group_delim = <delimiter for groups>

License

AGPL-3.0