From 679fcc75befcd4ca9445b2ab4ebb67b7efff65c7 Mon Sep 17 00:00:00 2001
From: tolerryan <ryan.toler@gmail.com>
Date: Mon, 28 Sep 2026 02:50:10 +0000
Subject: [PATCH] Authelia ODIC update for wikijs

---
 roles/authelia/templates/configuration.yml.j2 | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/roles/authelia/templates/configuration.yml.j2 b/roles/authelia/templates/configuration.yml.j2
index 5c0d2e7..52e83ac 100644
--- a/roles/authelia/templates/configuration.yml.j2
+++ b/roles/authelia/templates/configuration.yml.j2
@@ -64,6 +64,14 @@ identity_providers:
           - alt_emails
           - preferred_username
           - name
+      wikijs_claims_policy:
+        id_token:
+          - groups
+          - email
+          - email_verified
+          - alt_emails
+          - preferred_username
+          - name
     clients:
       - client_id: semaphore
         client_name: Semaphore
@@ -81,16 +89,17 @@ identity_providers:
       - client_id: wikijs
         client_name: Wiki
         client_secret: {{ wikijs_client_secret }}
+        claims_policy: wikijs_claims_policy
         public: false
-        authorization_policy: 'two_factor'
+        authorization_policy: two_factor
         require_pkce: false
         pkce_challenge_method: ''
         redirect_uris:
           - 'https://wikijs.{{ authelia_domain }}/login/{{ wikijs_uuid }}/callback'  # Note this must be copied during step 7 of the Application configuration.
         scopes:
-          - 'openid'
-          - 'profile'
-          - 'email'
+          - openid
+          - profile
+          - email
         response_types:
           - 'code'
         grant_types: