Instructions for integrating Nextcloud

Configure OpenID Connect

OpenID Connect enables amberSearch to allow the end users to link their Nextcloud accounts within amberSearch. Thus, the understanding of user context is guaranteed.

Go to Apps -> Security -> Download and Install OIDC Identity Provider https://url-to-your-nextcloud/settings/apps/security/oidc
Go to Settings -> Security -> Create a new client under OpenID Connect - Clients
- Set Name to amberSearch
- Set Redirection URI to
  https://customerName.ambersearch.de/api/auth/nextcloud/callback
- Set Type to Confidential
- Press Add
- Assign relevant groups (ideally a group that contains all users in Nextcloud) in the field Limited to Groups
Provide Client Identifier and Secret to amberSearch Team

Set up a service user

The service user is needed by amberSearch to access the documents and index them. Furthermore, it is also used for loading documents in real time if end users trigger documents preview or download functions in amberSearch.

Create a user within Nextcloud
Provide the following information to the amberSearch Team
- URL of your Nextcloud tenant
- Username of the service user
- Password of the service user
Share all documents with the service user. At least Read AND Share Permissions should be granted
- Be aware that users have to share their personal files with amberSearch if they want to intelligently search through their documents in amberSearch
Make sure to assign administrator permissions to the newly created user.
Without these permissions, the service user won't be able to determine which files are shared with which users.
To grant administrator access, simply add the user to the admin group.
Note that Nextcloud distinguishes between two types of administrators: Group Administrators and Super Administrators. In this case, you must assign Super Administrator permissions, as Group Administrators can only access information within their own groups.