SSO and public pages

[Marie Millet]

Dear community,

I want to activate SSO with my own IDP for Confluence licenced users, and have some pages being public.

Currently I have the behaviour:

1: if the user connects to a public page: ok, no authentication is requested

2: if the user connects to a private page: ok, the user is redirected to be authenticated to the idp

3: if the user connects to the url of the confluence instance (myconfluence.company.com), whose home page is public: ko, the user is redirected to be authenticated, so non-licenced users cannot access confluence.

Which settings can I adapt in order to get the proper behaviour for use case 3?

Thanks for all the pointers and help

[repi]

@Marie Millet 

From a logical point of view, variant 3 cannot exist.
How should the confluence know what type of user wants to access before they have logged on.
If you want to get anonymous access without a login screen, you have to explicitly jump to a public page, because there is no need to log in because everyone is allowed.

[Marie Millet]

@repi 

Thanks for the very quick reply. So the idea would be to map the DNS name of my confluence server explicitely to the url of a public page (e.g. on the app server configuration)?

My expectation would have been that if the home page of the confluence instance is public, no one is requested to authenticate. Persons that needs licenced access will then click on login and be authenticated by the IDP.

[repi]

That would be worth a try. Don't choose the dashboard as the homepage, but jump to a public space.
have you ever tried?

[Marie Millet]

The home page is already set to a public page. I will see tomorrow the possibilities.