github/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2024-12-01 12:50:02 -05:00
Code Issues Projects Releases Packages Wiki Activity
hedgedoc/docs/content/guides/auth/azure-ad.md
Gradience Team adec78851c Docs: Authentication - Azure Active Directory 
Signed-off-by: Pramit Singh <pramitsingh0@gmail.com>
2023-07-08 22:53:14 +02:00

2.1 KiB
Raw Blame History

Authentication Guide: Azure Active Directory

  1. Login or Sign-up on portal.azure.com

  2. Navigate to Azure Active Directory from the homepage or the sidebar.
    azure active directory service in azure portal page

  3. Navigate to App Registration
    where to create new app registration

  4. Enter Name "HedgeDoc". Then click on Register
    how to register an app

  5. In the next page, click on Add a certificate or secret then navigate to Client Secrets.
    Create a new client secret, add a description of your choice and copy the secret value.
    generate new secret key

  6. Navigate to authentication page, then add a new platform. Select web as the platform.
    Authentication page showing how to add a new web platform

  7. Set the Redirect URI to https://YOURHOSTNAME/auth/oauth2/callback. Check ID Tokens and uncheck Access Token.
    configuring redirection uri

  8. Retrieve the APPLICATION-ID and DIRECTORY-ID from the "Overview" section.
    Find application id and directory id from overview page

  9. Pass in your credentials as environment variables down below.

CMD_OAUTH2_USER_PROFILE_URL=https://your.azureprofileurl.com/auth/oauth2/callback
CMD_OAUTH2_USER_PROFILE_USERNAME_ATTR=yourPrincipalName
CMD_OAUTH2_USER_PROFILE_DISPLAY_NAME_ATTR=displayName
CMD_OAUTH2_USER_PROFILE_EMAIL_ATTR=email
CMD_OAUTH2_USER_PROFILE_ID_ATTR=id
CMD_OAUTH2_TOKEN_URL=https://login.microsoftonline.com/**DIRECTORY-ID**/oauth2/v2.0/token
CMD_OAUTH2_AUTHORIZATION_URL=https://login.microsoftonline.com/**DIRECTORY-ID**/oauth2/v2.0/authorize
CMD_OAUTH2_CLIENT_ID=APPLICATION-ID
CMD_OAUTH2_CLIENT_SECRET=CLIENT-SECRET
CMD_OAUTH2_PROVIDERNAME=AzureAD
CMD_OAUTH2_SCOPE=openid_offline_access