31,003
edits
Authentication, SSO and SSL: Difference between revisions
Jump to navigation
Jump to search
m
→Mode openid_connect
Tag: 2017 source edit |
Tag: 2017 source edit |
||
| Line 80: | Line 80: | ||
The you must set parameters and options of your openid connect service. From v21, you can enable the module OpenIDConnect to edit them. From v18 to v20, you must edit them from menu Home - Setup - Other. | The you must set parameters and options of your openid connect service. From v21, you can enable the module OpenIDConnect to edit them. From v18 to v20, you must edit them from menu Home - Setup - Other. | ||
==== Dolibarr application setup ==== | |||
The final configuration step is to create the following values in '''Home > Setup > Other Setup'''. | |||
{| class="wikitable" | |||
!Name | |||
!Example | |||
!Comment | |||
!Description | |||
|- | |||
|<code>MAIN_AUTHENTICATION_OPENID_URL</code> | |||
|See above | |||
|OpenID Connect URL | |||
|Composed OpenID Connect URL | |||
|- | |||
|<code>MAIN_LOGOUT_GOTO_URL</code> | |||
|See above | |||
|Identity Provider logout URL | |||
|Composed IdP logout URL | |||
|- | |||
|<code>MAIN_AUTHENTICATION_OIDC_CLIENT_ID</code> | |||
|<code>My-Super-Awesome-Client-ID-1234</code> | |||
|OpenID Connect Client ID | |||
|Application client ID | |||
|- | |||
|<code>MAIN_AUTHENTICATION_OIDC_CLIENT_SECRET</code> | |||
|<code>My-Very-Hidden-Client-Secret-1234</code> | |||
|OpenID Connect Client Secret | |||
|Application client secret | |||
|- | |||
|<code>MAIN_AUTHENTICATION_OIDC_TOKEN_URL</code> | |||
|<code><nowiki>https://tenant.us.auth0.com/oauth/token</nowiki></code> | |||
|OpenID Connect token URL | |||
|<code>/token</code> endpoint | |||
|- | |||
|<code>MAIN_AUTHENTICATION_OIDC_USERINFO_URL</code> | |||
|<code><nowiki>https://tenant.us.auth0.com/userinfo</nowiki></code> | |||
|OpenID Connect userinfo URL | |||
|<code>/userinfo</code> endpoint | |||
|- | |||
|<code>MAIN_AUTHENTICATION_OIDC_REDIRECT_URL</code> | |||
|<code><nowiki>https://dolibarr.domain.com/?openid_mode=true</nowiki></code> | |||
|OpenID Connect redirect URL | |||
|Dolibarr URL followed by <code>/?openid_mode=true</code> | |||
|- | |||
|<code>MAIN_AUTHENTICATION_OIDC_LOGIN_CLAIM</code> | |||
|<code>email</code> | |||
|OpenID Connect login claim | |||
|OpenID Connect claim matching the Dolibarr user login. If not set or empty, defaults to <code>email</code> | |||
|} | |||
Source page https://github.com/Dolibarr/dolibarr/issues/22740. | |||
====Composing <code>MAIN_AUTHENTICATION_OPENID_URL</code>==== | ====Composing <code>MAIN_AUTHENTICATION_OPENID_URL</code>==== | ||