Generic OAuth on TLJH

I’ve just installed TLJH and I’d like to set it up with my OIDC provider - but I’m bit confused after browsing through the docs.

How do you do that? What part do you do with tljh-config set and what part do you achieve with /opt/tljh/config/jupyterhub_config.d/jupyterhub_config.py file? Or am I completely wrong on a wrong path?

Also - what would be the best way to install oauthenticator as this package is not in Debian repos and of course pip will complain about breaking the system packages?

ok, I think I got it. Almost entire config is done through /opt/tljh/config/jupyterhub_config.d/jupyterhub_config.py file . All the OIDC provider info should be there (had to add some custom scope mapping as by default generic provider did not get oidc user data - if there’s a config setting for that, so I could avoid custom mappings, let me know). The only thing I had to do through tljh-config was:

```
sudo tljh-config set auth.type oauthenticator.generic.GenericOAuthenticator
sudo tljh-config reload
```

So now I have a working setup, with user management through external IdP. Yay!

Thus I can move to trickier part - figuring out extensions etc that would make it easier to manage notebooks in a lab environment. I’ve been checking out nbgrader and nbgitpuller - but that’s material for another topic :smiley: .