'OpenIDConnect', 'data' => [ // For Keycloak, use the REALM URL, e.g. https://auth.example/realms/ 'providerURL' => '{{ MEDIAWIKI_OIDC_ISSUER }}', 'clientID' => '{{ MEDIAWIKI_OIDC_CLIENT_ID }}', 'clientsecret' => '{{ MEDIAWIKI_OIDC_CLIENT_SECRET }}', 'scope' => [ 'openid', 'profile', 'email' ], ], ], ]; // Helpful defaults $wgOpenIDConnect_UseEmailNameAsUserName = true; $wgOpenIDConnect_MigrateUsers = true; // ### OIDC (PluggableAuth) – END