From 0bf40f63ea1700c7f222ed42e6150693dd9f4186 Mon Sep 17 00:00:00 2001
From: boomam <37086258+boomam@users.noreply.github.com>
Date: Mon, 20 Mar 2023 20:21:23 -0400
Subject: [PATCH] docs(oidc): minio integration (#5100)

Add MinIO OpenID Connect 1.0 documentation.

Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
---
 .../integration/openid-connect/minio/index.md | 91 +++++++++++++++++++
 1 file changed, 91 insertions(+)
 create mode 100644 docs/content/en/integration/openid-connect/minio/index.md

diff --git a/docs/content/en/integration/openid-connect/minio/index.md b/docs/content/en/integration/openid-connect/minio/index.md
new file mode 100644
index 000000000..5a405503e
--- /dev/null
+++ b/docs/content/en/integration/openid-connect/minio/index.md
@@ -0,0 +1,91 @@
+---
+title: "MinIO"
+description: "Integrating MinIO with the Authelia OpenID Connect Provider."
+lead: ""
+date: 2022-06-15T17:51:47+10:00
+draft: false
+images: []
+menu:
+  integration:
+    parent: "openid-connect"
+weight: 620
+toc: true
+community: true
+---
+
+## Tested Versions
+
+* [Authelia]
+  * [v4.37.5](https://github.com/authelia/authelia/releases/tag/v4.37.5)
+* [MinIO]
+  * [2023-03-13T19:46:17Z](https://github.com/minio/minio/releases/tag/RELEASE.2023-03-13T19-46-17Z)
+
+## Before You Begin
+
+{{% oidc-common %}}
+
+### Assumptions
+
+This example makes the following assumptions:
+
+* __Application Root URL:__ `https://minio.example.com`
+* __Authelia Root URL:__ `https://auth.example.com`
+* __Client ID:__ `minio`
+* __Client Secret:__ `insecure_secret`
+
+## Configuration
+
+### Application
+
+To configure [MinIO] to utilize Authelia as an [OpenID Connect 1.0] Provider:
+
+1. Login to [MinIO]
+2. On the left hand menu, go to `Identity`, then `OpenID`
+3. On the top right, click `Create Configuration`
+4. On the screen that appears, enter the following information:
+    - Name: `authelia`
+    - Config URL: `https://auth.example.com/.well-known/openid-configuration`
+    - Client ID: `minio`
+    - Client Secret: `insecure_secret`
+    - Claim Name: Leave Empty
+    - Display Name: `Authelia`
+    - Claim Prefix: `authelia`
+    - Scopes: `openid,profile,email`
+    - Redirect URI: `https://minio.example.com/oauth_callback`
+    - Role Policy: `readonly`
+    - Claim User Info: Disabled
+    - Redirect URI Dynamic: Disabled
+5. Press `Save` at the bottom
+6. Accept the offer of a server restart at the top
+7. When the login screen appears again, click the `Other Authentication Methods` open, then select `Authelia` from the list.
+8. Login
+
+### Authelia
+
+The following YAML configuration is an example __Authelia__
+[client configuration](../../../configuration/identity-providers/open-id-connect.md#clients) for use with [MinIO]
+which will operate with the above example:
+
+```yaml
+- id: minio
+  description: MinIO
+  secret: '$pbkdf2-sha512$310000$c8p78n7pUMln0jzvd4aK4Q$JNRBzwAo0ek5qKn50cFzzvE9RXV88h1wJn5KGiHrD0YKtZaR/nCb2CJPOsKaPK0hjf.9yHxzQGZziziccp6Yng'  # The digest of 'insecure_secret'.
+  public: false
+  authorization_policy: two_factor
+  redirect_uris:
+    - https://minio.example.com/apps/oidc_login/oidc
+  scopes:
+    - openid
+    - profile
+    - email
+    - groups
+  userinfo_signing_algorithm: none
+```
+
+## See Also
+
+- [MinIO OpenID Identiy Management](https://min.io/docs/minio/linux/reference/minio-server/minio-server.html#minio-server-envvar-external-identity-management-openid)
+
+[MinIO]: https://minio.com/
+[Authelia]: https://www.authelia.com
+[OpenID Connect 1.0]: ../../openid-connect/introduction.md