How can I link an OIDC Author profile to a Github Author

[HeavyWaterDev]

Connecting OIDC-Generated Profile to GitHub Author

Hello!

I'm currently attempting to link an OIDC-generated profile with an existing GitHub author.

I find myself uncertain about the process of connecting the OIDC account to the corresponding GitHub account. I suspect that I might be using the incorrect AuthProviderUID.

I have attempted digging through the code but am not familiar with the project well enough to figure out myself.

I think I need to put the right UID from the azure tenant here:

idents:
  - ident: John Doe
    aliases:
      - github.com/john-doe
      - AuthProviderUID:<Not sure what UID is from the Azure tenant>

Any advice would be helpful,
really cool project!

[morucci]

Hi,

By default Monocle uses the 'sub' key of the OIDC Token. Then you need to know what will be the 'sub' value of a given user. This value is to append to "AuthProviderUID:".
Monocle provides some information in the API logs when OIDC is activated and when an user is attempting to authenticate via the Auth provider. See the log lines containing the following in order to help with debugging:

• "OIDCProviderTokenRequested" -> display the whole id token. Use [2] to display a readable version of the token.
• "Could not find oidc_user_claim" -> display info regarding why the extra claim is not found [1]

Sometime an other claim than 'sub' is more suited to be used then you need to set [1].

[1] See oidc_user_claim https://github.com/change-metrics/monocle?tab=readme-ov-file#oidc-provider
[2] https://jwt.io/

[HeavyWaterDev]

Got it working, thank you so much.

Hope you have a great new year!