Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

how to replace the dex login interface with my organization sso login interface in eclipse-che? #21136

Closed
Divine1 opened this issue Feb 7, 2022 · 10 comments
Labels
area/install Issues related to installation, including offline/air gap and initial setup kind/question Questions that haven't been identified as being feature requests or bugs.

Comments

@Divine1
Copy link

Divine1 commented Feb 7, 2022

Summary

i have installed below chectl version
image

i have installed eclipse-che on minikube cluster.
below are the namespaces currently available in my minikube cluster
image

below is the default dex login interface. i want to replace the dex login interface with my organization sso login interface.
image

please let me know the steps on how integrate organization sso login with eclipse-che instead of dex login interface

Relevant information

No response

@Divine1 Divine1 added the kind/question Questions that haven't been identified as being feature requests or bugs. label Feb 7, 2022
@che-bot che-bot added the status/need-triage An issue that needs to be prioritized by the curator responsible for the triage. See https://github. label Feb 7, 2022
@svor
Copy link
Contributor

svor commented Feb 7, 2022

@tolusha could you help with that?

@svor svor added area/install Issues related to installation, including offline/air gap and initial setup and removed status/need-triage An issue that needs to be prioritized by the curator responsible for the triage. See https://github. labels Feb 7, 2022
@Divine1
Copy link
Author

Divine1 commented Feb 8, 2022

@tolusha kindly help me out

@Divine1
Copy link
Author

Divine1 commented Feb 10, 2022

@svor @tolusha
please share with me if any details or docs are available on this? :)

@svor
Copy link
Contributor

svor commented Feb 10, 2022

@Divine1 I see that it's possible to customize Dex https://dexidp.io/docs/templates/
maybe @sparkoo could provide some details how to do that in Che

@Divine1
Copy link
Author

Divine1 commented Feb 10, 2022

@svor thanks a lot for the response.

should i have to update the dex configmap with gitlab connector as it is mentioned here? i will try this one.

image

image

@sparkoo
Copy link
Member

sparkoo commented Feb 10, 2022

I've never did that, sorry. Please try to follow dex documentation

@Divine1
Copy link
Author

Divine1 commented Feb 11, 2022

@sparkoo @svor @tolusha

i followed this documentation and implemented the connector in dex configmap .

Now when i navigate to https://192.168.49.2.nip.io/, i'm able to view my gitlab sso login screen instead of the default dex login screen. The sso authentication is successful, the but redirection back to the dex - eclipse-che website shows below error

image

below is the redirect url i have configured in the gitlab application. i suspect this url is incorrect, but i'm not able to figure out the valid redirect url. Please let me know what is the valid callbackUrl.
image

kubectl edit configmap dex -n dex - below is the gitlab configuration in configmap
image

please help me out on this

@sparkoo
Copy link
Member

sparkoo commented Feb 11, 2022

from the configmap you can see that redirect url should be https://dex.192.168.49.2.nip.io/callback

@Divine1
Copy link
Author

Divine1 commented Feb 11, 2022

@sparkoo thank you for the response. i have updated the redirect url to https://dex.192.168.49.2.nip.io/callback

now i get the requested scope is invalid, unknown or malformed error message as shown below

image

i have added below scopes in my gitlab application
image

What i'm i missing here? Please let me know how to resolve this error.

@Divine1
Copy link
Author

Divine1 commented Feb 11, 2022

@sparkoo
The above requested scope is invalid issue is resolved now.

in my gitlab -> applications read_user scope was missing. i added the read_user scope , now i'm able to successfully login into eclipse-che using gitlab-sso integration with dex .
image

i'm facing another issue with logout after successfully logging in into eclipse-che via gitlab-sso.

i will create another issue for it.

thank you for the support @sparkoo @tolusha @svor

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/install Issues related to installation, including offline/air gap and initial setup kind/question Questions that haven't been identified as being feature requests or bugs.
Projects
None yet
Development

No branches or pull requests

4 participants