Plone as OIDC provider?

Plone Support Add-on Development
1

Hi there,

can Plone be used as OIDC provider (for Office 365)?

We have a use-case where a legacy authentication source (beyond our control) is already used within Plone using a custom PAS plugin. Now, we want to use Office 365 together which this legacy authentication system as authentication provider. The idea would be to provide the functionality through Plone as OIDC provider while wrapping the legacy authentication source internally. Any experiences?

2

There seem to be some packages I've not tested: GitHub - nazrulworld/plone.oidc: OpenID Connect implementation in Plone and GitHub - collective/pas.plugins.oidc: PAS plugin for OpenID Connect authentication.

In the django context you can take a look at Welcome to Django Microsoft Authentication Backend’s documentation! — Django Microsoft Authentication Backend 2.4.0+5.g2c50bcf documentation and Welcome to Django OIDC Provider Documentation! — django-oidc-provider 0.8.0 documentation

And there ist of course pyoidc.