Agents can sign in through an external OpenID Connect provider such as Google or Keycloak.
You still create agent accounts in Libredesk yourself. Signing in with SSO does not create an account.
Setup
Providers differ in the details, so check your provider's documentation for anything not covered here.
1. In your provider's admin console, create a new OpenID Connect application or client. Note the client ID and the client secret.
2. In Libredesk, go to Admin, then Security, then SSO, and click New SSO. Enter the provider URL, the client ID, the client secret, and a name for the connection.
3. After saving, copy the callback URL that Libredesk generates and add it as a valid redirect URI in your provider's client settings.
Example: Keycloak
1. Log in to the Keycloak admin console.
2. Go to Clients and click Create. Set a client ID such as libredesk-app, set the client protocol to openid-connect, set the root URL and web origins to your app domain, and under authentication flow uncheck everything except the standard flow. Save.
3. Open the Credentials tab. Make sure the client authenticator is set to Client Id and Secret, and note the generated client secret.
4. In Libredesk, go to Admin, then Security, then SSO, and click New SSO. Enter the provider URL, for example https://keycloak.example.com/realms/yourrealm, a name, the client ID and the client secret. Save.
5. Open the new SSO entry again from the three-dot menu and copy the callback URL. Back in Keycloak, edit the client and add that URL to Valid Redirect URIs, for example https://ticket.example.com/api/v1/oidc/1/finish.