OAuth1 and OAuth2

1 Requirements

In this feature request we put the important topic of authentication mechanism back to the agenda because these mechanisms define substantially the usability of ILIAS within a system landscape.

We take OAuth2 as an example. It is an open standard for authorization that enables secure API-Authorization for desktop-, web- and mobile-applications.
It is supported by many tools and is widely distributed as it is used at major internet companies such as in Facebook's Graph API or at Google where it is the recommended authentication mechanism for all of its APIs.

We already laid the groundwork related to the implementation of OAuth2 by the development of the Ilias REST-Plugin (according to RFC6749).

ILIAS RestPlugin

2 Additional Information

• Idea / concept: Dirk Schäfer, Thomas Hufschmidt, Stefan Schneider (Uni Marburg)
• Interest in funding: Uni Marburg
• Maintainer: (will be set by Jour Fixe / maintainer)
• Implementation of the feature is done by (will be set by Jour Fixe / maintainer)
• Testcases by: (please add your name if you want to create the testcases for this feature)

3 Discussion

Jansen, Michael [mjansen] March 18, 2016: I personally support this request. I prefer an implementation as a fully integrated authentication method, independently of the REST plugin. I already implemented a Facebook and Twitter authentication based on OAuth some years ago so I assume, that a generic OAuth(2) authentication would be widely applauded.
Please keep in mind, that the authentication service will be completely revised for ILIAS 5.2.x.

Glaubitz, Marko [mglaubitz] 25. July 2016: We would highly appreciate this feature as well, as we are currently facing problems in connections with our ILIAS (Offline) App which needs OAuth2 dearly in order to provide an SSO-experience when switching between the app and ILIAS in a brwoser on a mobile device.

Mela, Alix [ILIAS_LM] 2019-11-11
For additional documentation: OpenID Connect support

4 Implementation

...