mirror/Gokapi
1
0
Fork 0
mirror of https://github.com/Forceu/Gokapi.git synced 2025-12-30 13:29:34 -06:00
Code Issues Packages Projects Releases Wiki Activity

Completed Entra example configuration #130

Browse Source
This commit is contained in:
Marc Ole Bulling
2024-02-07 00:55:27 +01:00
parent 79c95936ef
commit f32201321a
1 changed files with 22 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
docs/examples.rst
View File

@@ -305,14 +305,18 @@ Gokapi Configuration
.. _oidcconfig_entra:
Microsoft Entra / Azure (WIP)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Microsoft Entra / Azure
^^^^^^^^^^^^^^^^^^^^^^^^^
Server Configuration
""""""""""""""""""""""
.. note::
This guide is a work-in-progress. Filtering users by email or group is not possible yet with this guide. If you have experience with Entra, please let us know on how to configure it to pass email or group membership, so we can add it to the documentation.
This guide has been last updated in February 2024
Creating the client
**********************
#. Open https://entra.microsoft.com/
#. Go to Applications / App registration / New registration
@@ -324,6 +328,19 @@ Server Configuration
#. The provider URL is ``https://login.microsoftonline.com/REALM/v2.0/``, replace ``REALM`` with the tenant id shown in Application Overview / Directory (tenant) ID (see also https://learn.microsoft.com/en-us/entra/identity-platform/v2-protocols-oidc for other options)
Optional: Restricting Gokapi to specific users or groups:
*************************************************************
#. Open https://entra.microsoft.com/
#. Go to Applications / Enterprise Applications and select Gokapi
#. Go to Manage / Properties and check ``Assignment required?``
#. Go to Manage / Users & Groups and add the allowed users / groups
Gokapi Configuration
""""""""""""""""""""""
@@ -338,7 +355,7 @@ Gokapi Configuration
+----------------------+-------------------------------------------------------------------+-----------------------------------------------------------------------------+
| Recheck identity | Use a low interval. | 12 hours |
+----------------------+-------------------------------------------------------------------+-----------------------------------------------------------------------------+
| Restrict to user | Unknown if supported | unchecked |
| Restrict to user | Unsupported | unchecked |
+----------------------+-------------------------------------------------------------------+-----------------------------------------------------------------------------+
| Restrict to group | Unknown if supported | unchecked |
| Restrict to group | Unsupported | unchecked |
+----------------------+-------------------------------------------------------------------+-----------------------------------------------------------------------------+