OIDC external webmail

thopic

Hello,
I am trying the new OIDC authentication feature. I managed to configure Keycloak + Mailcow to use additional email address and I am now wondering how could I use an external webmail (I suspect it is not easily doable).

For the context, I don’t want to use SoGO as I don’t want my users to log in their admin webui each time they send/consult an email (though the credentials are the same). Also, I find SoGO and the logout process too complex (they first need to go back to their admin webui before to be able to logout).

I want to use roundcube. The email address is set under mailcow_email user attribute.

Any idea?

Thank you 🙂

accolon

thopic For the context, I don’t want to use SoGO as I don’t want my users to log in their admin webui each time they send/consult an email (though the credentials are the same). Also, I find SoGO and the logout process too complex (they first need to go back to their admin webui before to be able to logout).

That’s not necessary. Your users can log in via https://mail.example.com/SOGo and log out via the button in the top right of the SOGo GUI.

thopic I want to use roundcube.

The mailcow docs describe how to setup/integrate Roundcube as webmail for mailcow:
https://docs.mailcow.email/third_party/roundcube/third_party-roundcube/

This doesn’t use OpenID or other new features but works perfectly. I’ve been using it for several years now.

thopic

Hello @accolon, thank you for your reply.

accolon Your users can log in via https://mail.example.com/SOGomail.example.comhttps://mail.example.com/SOGoNo preview could be generated for this link and log out via the button in the top right of the SOGo GUI.

Unfortunately it seems the process has changed in nightly :

I use roundcube with another stable mailcow stack and there is no trouble with classic authentication. Actually I am asking specifically for OIDC mechanism.

Cisco30

It’s strange, I don’t see the same thing as you in the menu

thopic

@Cisco30 are you on nightly branch?

Cisco30

@thopic
No I use the “stable” branch

arneboeses

@thopic

Sorry to jump on that topic; do you somehow have a doc / link how you managed to use keycloak and mailcow? It’s sadly not working for me, neither open-id or keycloak

Best,
Arne

thopic

arneboeses

Hi Arne, just jump on the link I provided in description, it should be enough. If you need more information you can open a new thread and tag me but I don’t think I can bring more info. As I explained in gh comment, I ultimately found a working config by chance.
Regards