maicol07 peppogiappe As said in the comment above, next release will introduce a simpler and better installation (also on normal websites). The release is coming soon. If you want to continue, I reply you per points: Be sure to download the latest release, not the master branch (instable and not ready for production). You can find the latest release here. Then you can integrate it with your SSO system You need to rename the config.php.dist file to config.php You need to use the login method you find in the class. You can check the sample-website folder for examples. That's the master branch. You need to download the archive I've linked above. I'd recommend to wait until next release is out. I hope this helps!
peppogiappe maicol07 Thanks a lot! But all theese things are to put not in my flarum main folder, but in my main website? So external to flarum?
peppogiappe Hi maicol07 , It all seems ok, only that the call to /api/token gives error: "csfr token mismatch", so it's go on with workflow but without set the flarum_remember with the cookie, so i can't log in from an external site.
peppogiappe maicol07 Made by random 40 charachters with your tool above.. and set user_id to 4, that is my user admin. And i also changed the call you make from userId=1 to userId=4, it's ok?
maicol07 peppogiappe Check if this helps: https://discuss.flarum.org/d/20867-csrf-token-mismatch-on-beta-9-upgrade/
peppogiappe maicol07 Is it a problem if I'am in local environment? my url to flarum is a virtual host: http://flarum.local.. the root domain is local or flarum.local?
maicol07 peppogiappe Maybe, I'm actually testing next version with XAMPP. Flarum is a subdomain or a domain (and local is the extension) in your url?
peppogiappe maicol07 yes, i'am using localhost to hit the index.php of sample-website inside the extension, and flarum.local is the forum, but always under localhost, only with a virtual host
peppogiappe maicol07 I have also read that maybe there is a problem with password that i pass to login? I'am passing to login password not hashed
maicol07 peppogiappe Yeah, must be a plain password only if user was signed up before the SSO extension was enabled
peppogiappe maicol07 i am trying without enable the extension.. because the extension only redirect users true?
peppogiappe maicol07 Activates new users, but not if them are already in the database before the extension activated true?