Skip to content

Add SSO (OpenID Connect)#241

Merged
lbr38 merged 3 commits into
lbr38:develfrom
ursinn:feature/sso/develop
Mar 4, 2025
Merged

Add SSO (OpenID Connect)#241
lbr38 merged 3 commits into
lbr38:develfrom
ursinn:feature/sso/develop

Conversation

@ursinn
Copy link
Copy Markdown
Contributor

@ursinn ursinn commented Feb 11, 2025

This PR adds support for SSO using OpenID Connect

For OpenID Connect it uses the following library (added via composer)
https://github.com/jumbojett/OpenID-Connect-PHP

SSO

The SSO feature was testet againts the following Identity Providers (IdP)

  • Okta (Workforce Identity Cloud, Developer Edition)
  • Authentik (Open Source)
  • Microsoft EntraID / Azure AD (tenant of feature sponsor)

SSO can be configured as super-administrator in the UI or via the app.yaml file

Example Okta

The following settings must be configured:

setting value
provider_url (Example: https://dev-0000000.okta.com/)
client_id (client id)
client_secret (client secret)

Example Authentik

The following settings must be configured:

setting value
provider_url (Example: http://server:9000/application/o/repomanager/)
authorization_endpoint (Example: http://localhost:9000/application/o/authorize/)
client_id (client id)
client_secret (client secret)

app.yaml

  • Allows for automation.
  • Created automatically for new installations, must be created manually for existing installations.
  • The settings configured in the file override the values configured via the UI.
  • It is possible to use both the file and the UI for configuration.

@lbr38 lbr38 force-pushed the devel branch 3 times, most recently from e8e8c5b to e2c58bd Compare February 12, 2025 10:08
Comment thread docker/init Outdated
@ursinn ursinn marked this pull request as ready for review February 20, 2025 15:44
@lbr38 lbr38 force-pushed the devel branch 11 times, most recently from 8ce6b9f to b249ed8 Compare February 26, 2025 16:16
@lbr38 lbr38 force-pushed the devel branch 3 times, most recently from 6cd0baf to 2c101ec Compare March 1, 2025 10:07
@ursinn
Copy link
Copy Markdown
Contributor Author

ursinn commented Mar 4, 2025

The SSO implementation and config file are ready for review.

@lbr38 lbr38 merged commit 9764338 into lbr38:devel Mar 4, 2025
@lbr38
Copy link
Copy Markdown
Owner

lbr38 commented Mar 4, 2025

This is now merged in devel. I will take care of the CI issues and do the adjustments needed. Thanks again for your work!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants