Document Google OpenID Connect email attribute (#14081)

This commit is contained in:
Paul Tötterman 2022-10-07 17:22:25 +03:00 committed by GitHub
parent dc37b68a25
commit 8074430d25
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 3 additions and 1 deletions

1
changelog.d/14081.doc Normal file
View File

@ -0,0 +1 @@
Expand Google OpenID Connect example config to map email attribute. Contributed by @ptman.

View File

@ -336,11 +336,12 @@ oidc_providers:
issuer: "https://accounts.google.com/"
client_id: "your-client-id" # TO BE FILLED
client_secret: "your-client-secret" # TO BE FILLED
scopes: ["openid", "profile"]
scopes: ["openid", "profile", "email"] # email is optional, read below
user_mapping_provider:
config:
localpart_template: "{{ user.given_name|lower }}"
display_name_template: "{{ user.name }}"
email_template: "{{ user.email }}" # needs "email" in scopes above
```
4. Back in the Google console, add this Authorized redirect URI: `[synapse
public baseurl]/_synapse/client/oidc/callback`.