Fairlogin Integration
ERPNext supports authentication through Fairlogin, a GDPR-aware OAuth provider developed by fairkom.eu. Fairlogin is built on Keycloak, making its configuration similar to other Keycloak-based OAuth providers.
1. Access Social Login Settings
To configure Fairlogin authentication, navigate to Home → Integrations → Social Login Key.
2. Configure Keycloak Client
Since Fairlogin is based on Keycloak, begin by creating a new client in the Keycloak administration console.
- Create a new client.
- Select OpenID as the client protocol.
- Enter your ERPNext site’s URL as the:
- Root URL
- Base URL
- Redirect URL
If you’re using Fairlogin services provided by fairkom, adding your ERPNext instance as a client can also be completed through their managed setup service.
3. Configure Fairlogin in ERPNext
Create or edit a Social Login Key and configure the following OAuth endpoints.
| Setting | Value |
|---|---|
| Base URL | https://id.fairkom.net/auth/realms/fairlogin/ |
| Authorize URL | https://id.fairkom.net/auth/realms/fairlogin/protocol/openid-connect/auth |
| Redirect URL | /api/method/frappe.integrations.oauth2_logins.login_via_fairlogin |
| Access Token URL | https://id.fairkom.net/auth/realms/fairlogin/protocol/openid-connect/token |
| API Endpoint | https://id.fairkom.net/auth/realms/fairlogin/protocol/openid-connect/userinfo |
4. Enable Fairlogin
After entering the required OAuth configuration, enable the Fairlogin service.
Users can then authenticate and sign in to ERPNext using their Fairlogin accounts.
5. Default Role Assignment
When a new user logs in through Fairlogin for the first time, ERPNext assigns the Blogger role by default. This default role is currently hardcoded in the implementation.
