# Mobilizon

## Presentation

Mobilizon is an online tool to help manage your events, your profiles and your groups.

Mobilizon lets users authenticate with OpenID Connect through the same plugin used by Keycloak.

First, make sure you have set up LemonLDAP::NG ‘s OpenID Connect service and added a Relying Party for your Mobilizon instance

The only options you need to configure are:

- Client ID: choose one

- Client Secret: choose one

- Allowed redirection addresses for login: `https://mobilizon.example.com/auth/keycloak/callback`

## Mobilizon configuration

Edit `/etc/mobilizon/config.exs`, and adjust the Client ID, Client Secret and URLs to match your domain

    config :ueberauth,
        Ueberauth,
        providers: [
          keycloak: {Ueberauth.Strategy.Keycloak, [default_scope: "openid profile email"]}
        ]

    config :mobilizon, :auth,
      oauth_consumer_strategies: [
        {:keycloak, "LemonLDAP::NG"}
      ]

    config :ueberauth, Ueberauth.Strategy.Keycloak.OAuth,
      client_id: "CHANGEME",
      client_secret: "CHANGEME",
      site: "https://auth.example.com",
      authorize_url: "https://auth.example.com/oauth2/authorize",
      token_url: "https://auth.example.com/oauth2/token",
      userinfo_url: "https://auth.example.com/oauth2/userinfo",
      token_method: :post