# Using a current OAuth server for authentication

**URL:** <https://community.dreamfactory.com/t/using-a-current-oauth-server-for-authentication/3466>\
**Category:** Authentication & Security\
**Created:** [November 22, 2016, 8:37pm UTC](https://community.dreamfactory.com/t/using-a-current-oauth-server-for-authentication/3466 "2016-11-22T20:37:51Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![transistor](https://avatars.discourse-cdn.com/v4/letter/t/48db29/32.png) [@transistor](https://community.dreamfactory.com/u/transistor)\
**Post date:** [November 22, 2016, 8:37pm UTC](https://community.dreamfactory.com/t/using-a-current-oauth-server-for-authentication/3466/1 "2016-11-22T20:37:51Z")

</div>

So, we’ve got an OAuth2 server with user registration, login, recover password, etc.

How do we authenticate against it?

Thanks!

---

<div class="post-metadata">

**Author:** ![pier](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/pier/32/892_2.png) [@pier](https://community.dreamfactory.com/u/pier)\
**Post date:** [November 23, 2016, 4:57pm UTC](https://community.dreamfactory.com/t/using-a-current-oauth-server-for-authentication/3466/2 "2016-11-23T16:57:46Z")

</div>

I’d like to know that too.

Is it possible to implement a generic OAuth solution with DreamFactory?

---

<div class="post-metadata">

**Author:** ![DFCommunityManager](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/dfcommunitymanager/32/887_2.png) [@DFCommunityManager](https://community.dreamfactory.com/u/DFCommunityManager)\
**Post date:** [November 27, 2016, 3:11pm UTC](https://community.dreamfactory.com/t/using-a-current-oauth-server-for-authentication/3466/3 "2016-11-27T15:11:47Z")

</div>

> [@pier](#):
>
> OAuth

Yes we do!

Check out a[blog post on OAuth here.](https://blog.dreamfactory.com/using-dreamfactory-2.0-with-oauth-services)

Thanks.

---

<div class="post-metadata">

**Author:** ![transistor](https://avatars.discourse-cdn.com/v4/letter/t/48db29/32.png) [@transistor](https://community.dreamfactory.com/u/transistor)\
**Post date:** [November 27, 2016, 7:35pm UTC](https://community.dreamfactory.com/t/using-a-current-oauth-server-for-authentication/3466/4 "2016-11-27T19:35:46Z")

</div>

Hello there, @DFCommunityManager,

I’ve checked that blog post before, and it is very specific to Facebook.

Now, if what you are trying to imply is that using any of DF OAuth Services is **the same** for any OAuth system (other than the ones on the list; Facebook, Twitter, Google, Microsoft, Bitbucket, Github and LinkedIn), then I would please encourage you to be more clear and explicit about it, because, by the way the OAuth Servers are presented and the Blog is written, it would seem that **only** those providers are supported and nothing else.

If that’s the case (that I can use any OAuth service to authenticate against a private OAuth Service), then I guess it would be reasonable to expect an option in the service providers of “Custom” or something like that, because I wouldn’t want **my** service to be listed as “Facebook” or whatever, because, it is in fact, not Facebook. See?

So, can I use my own OAuth Server to authenticate users in DreamFactory? (v 2.3.1)

Thank you

---

<div class="post-metadata">

**Author:** ![pier](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/pier/32/892_2.png) [@pier](https://community.dreamfactory.com/u/pier)\
**Post date:** [November 27, 2016, 7:51pm UTC](https://community.dreamfactory.com/t/using-a-current-oauth-server-for-authentication/3466/5 "2016-11-27T19:51:48Z")

</div>

> [@DFCommunityManager](#):
>
> Yes we do!
> 
> Check out a blog post on OAuth here.
> 
> Thanks.

From that blog post it seems you only support a handful of OAuth providers which is not what we are asking here.

> The currently supported OAuth service providers are **Facebook, Twitter, Google, and GitHub**. We’ll be adding more OAuth providers in the future.

Is it possible for DF to use our custom authentication server with OAuth?

If not, then how can we authenticate our users and then assign permissions to endpoints and its actions of the DF API?

@DFCommunityManager could you pass these questions to the dev team or at least give me an email to be able to contact them myself?

---

<div class="post-metadata">

**Author:** ![DFCommunityManager](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/dfcommunitymanager/32/887_2.png) [@DFCommunityManager](https://community.dreamfactory.com/u/DFCommunityManager)\
**Post date:** [November 28, 2016, 12:56pm UTC](https://community.dreamfactory.com/t/using-a-current-oauth-server-for-authentication/3466/6 "2016-11-28T12:56:33Z")

</div>

> [@pier](#):
>
> Is it possible for DF to use our custom authentication server with OAuth

Currently we support BitBucket, Facebook, LinkedIn, GitHub, Google, Twitter, Microsoft Live and Salesforce. We do not support custom OAth at the moment. I think I heard of a community member adding one with Microsoft Live - but I’m not sure how that actually works.

We’ve added it as a feature request!

Thanks!

---

<div class="post-metadata">

**Author:** ![mattschaer](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/mattschaer/32/914_2.png) [@mattschaer](https://community.dreamfactory.com/u/mattschaer)\
**Post date:** [December 27, 2016, 8:10pm UTC](https://community.dreamfactory.com/t/using-a-current-oauth-server-for-authentication/3466/7 "2016-12-27T20:10:14Z")

</div>

@pier @transistor I’ve heard of people getting custom OAuth to work using the Microsoft Live service type and editing the .env as follows:

1. Edit .env file and put the following options there and save it:

MS\_LIVE\_AUTH\_URL=https://custom\_auth\_url;  
MS\_LIVE\_TOKEN\_URL=https://custom\_token\_url;  
MS\_LIVE\_USER\_URL=https://custom\_user\_url?access\_token=

1. Create an OAuth service using MS Live service type.

2. After entering all the standard config information for this service, check the “Use custom OAuth 2.0 provider for this type” checkbox on the config tab and create the service.

There has been a feature request filed to add custom oauth service type in the future, no decisions made on implementation at time of writing.
