RPJosh
/
authelia
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
authelia/docs/community/oidc-integrations.md

50 lines
8.0 KiB
Markdown
Raw Normal View History

docs: update and enhance oidc documentation (#2142) Update and adjust OIDC documentation. This also adds information for users about RP's that have been tested. Co-authored-by: Georg Lauterbach <44545919+aendeavor@users.noreply.github.com> Co-authored-by: Clément Michaud <clement.michaud34@gmail.com> Co-authored-by: Amir Zarrinkafsh <nightah@me.com> Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2021-07-14 01:36:07 +00:00
---
layout: default
title: Community-Tested OIDC Integrations
parent: Community
docs: added example configs for oidc for specific services (portainer, proxmox) (#2831) Co-authored-by: Clément Michaud <clement.michaud34@gmail.com>
2022-02-07 23:05:10 +00:00
nav_order: 5
has_children: true
has_toc: false
docs: update and enhance oidc documentation (#2142) Update and adjust OIDC documentation. This also adds information for users about RP's that have been tested. Co-authored-by: Georg Lauterbach <44545919+aendeavor@users.noreply.github.com> Co-authored-by: Clément Michaud <clement.michaud34@gmail.com> Co-authored-by: Amir Zarrinkafsh <nightah@me.com> Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2021-07-14 01:36:07 +00:00
---
docs: add gitea redirect_uri with notes to community docs (#2275) * docs: add gitea redirect_uri with notes to community docs * docs: remove unnecessary dash from Gitea notes Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2021-08-10 10:48:31 +00:00
# OIDC Integrations
docs: update and enhance oidc documentation (#2142) Update and adjust OIDC documentation. This also adds information for users about RP's that have been tested. Co-authored-by: Georg Lauterbach <44545919+aendeavor@users.noreply.github.com> Co-authored-by: Clément Michaud <clement.michaud34@gmail.com> Co-authored-by: Amir Zarrinkafsh <nightah@me.com> Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2021-07-14 01:36:07 +00:00
**Note** This is community-based content for which the core-maintainers cannot guarantee correctness. The parameters may change over time. If a parameter does not work as documented, please submit a PR to update the list.
## Currently Tested Applications
fix(handlers): include preferred_username claim in meta (#2829) This includes the preferred_username claim in the meta. Also uses the consts for all the applicable claims and scopes.
2022-02-09 22:55:28 +00:00
| Application | Minimal Version | Notes |
|:----------------:|:------------------------------:|:-----------------------------------------------------------------------------------------------------------:|
| Gitea | `1.14.6` | |
| GitLab | `13.0.0` | |
| Grafana | `8.0.5` | |
| Hashicorp Vault | `1.8.1` | |
| MinIO | `RELEASE.2021-11-09T03-21-45Z` | must set `MINIO_IDENTITY_OPENID_CLAIM_NAME: groups` in MinIO and set [MinIO policies] as groups in Authelia |
| Nextcloud | `22.1.0` | Tested using the `nextcloud-oidc-login` app - [Link](https://github.com/pulsejet/nextcloud-oidc-login) |
| Wekan | `5.41` | |
| Portainer CE | `2.6.1` | Settings to use username as ID: set `Scopes` to `openid` and `User Identifier` to `preferred_username` |
| Bookstack | `21.10` | |
docs: add OIDC integration details about Harbor and Verdaccio (#2867) Added Harbor (docker/helm open source registry) and verdaccio (open source NPM proxy registry)
2022-02-13 09:05:38 +00:00
| Harbor | `1.10` | It works on >v2.1 also, but not sure if there is OIDC support on v2.0|
| Verdaccio | `5` | Depends on this fork of verdaccio-github-oauth-ui: [Link](https://github.com/OnekO/verdaccio-github-oauth-ui)
|
docs(oidc): add guidance to community docs for minio (#2191)
2021-07-19 22:23:55 +00:00
[MinIO policies]: https://docs.min.io/minio/baremetal/security/minio-identity-management/policy-based-access-control.html#minio-policy
docs: update and enhance oidc documentation (#2142) Update and adjust OIDC documentation. This also adds information for users about RP's that have been tested. Co-authored-by: Georg Lauterbach <44545919+aendeavor@users.noreply.github.com> Co-authored-by: Clément Michaud <clement.michaud34@gmail.com> Co-authored-by: Amir Zarrinkafsh <nightah@me.com> Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2021-07-14 01:36:07 +00:00
## Known Callback URLs
If you do not find the application in the list below, you will need to search for yourself - and maybe come back to open a PR to add your application to this list so others won't have to search for them.
`<DOMAIN>` needs to be substituted with the full URL on which the application runs on. If GitLab, as an example, was reachable under `https://gitlab.example.com`, `<DOMAIN>` would be exactly the same.
fix(handlers): include preferred_username claim in meta (#2829) This includes the preferred_username claim in the meta. Also uses the consts for all the applicable claims and scopes.
2022-02-09 22:55:28 +00:00
| Application | Version | Callback URL | Notes |
|:---------------:|:-------------------------------------:|:------------------------------------------------------------------------:|:------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------:|
| Gitea | `1.14.6` | `<DOMAIN>/user/oauth2/authelia/callback` | `ROOT_URL` in `[server]` section of `app.ini` must be configured correctly. Typically it is `<DOMAIN>/`. The string `authelia` in the callback url is the `Authentication Name` of the configured Authentication Source in Gitea (Authentication Type: OAuth2, OAuth2 Provider: OpenID Connect). |
| GitLab | `14.0.1` | `<DOMAIN>/users/auth/openid_connect/callback` | |
| Hasicorp Vault | `14.0.1` | `<DOMAIN>/oidc/callback` and `<DOMAIN>/ui/vault/auth/oidc/oidc/callback` | |
| MinIO | `RELEASE.2021-07-12T02-44-53Z` | `<DOMAIN>/oauth_callback` | |
| Nextcloud | `22.1.0` + `nextcloud-oidc-login` app | `<DOMAIN>/apps/oidc_login/oidc` | |
| Wekan | `5.41` | `<DOMAIN>/_oauth_oidc` | |
| Portainer CE | `2.6.1` | `<DOMAIN>` | |
docs: add OIDC integration details about Harbor and Verdaccio (#2867) Added Harbor (docker/helm open source registry) and verdaccio (open source NPM proxy registry)
2022-02-13 09:05:38 +00:00
| Bookstack | `21.10` | `<DOMAIN>/oidc/callback` | |
| Harbor | `1.10` | `<DOMAIN>/-/oauth/callback` | |
| Verdaccio | `5` | `<DOMAIN>/oidc/callback` | |