dani
/
lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Documentation for OIDC support in ITSM-NG

This commit is contained in:
Clément OUDOT 2022-09-23 18:49:39 +02:00
parent 5e26307e63
commit 80414acc4c
3 changed files with 66 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
doc/sources/admin/applications.rst
View File

@ -27,6 +27,7 @@ Applications
applications/guacamole
applications/humhub
applications/iparapheur
applications/itsm-ng
applications/jitsimeet
applications/liferay
applications/limesurvey
@ -114,6 +115,7 @@ Application Configuration
.. image:: applications/guacamole.png :doc:`Apache Guacamole<applications/guacamole>` ✔ ✔ ✔
.. image:: applications/humhub_logo.png :doc:`HumHub<applications/humhub>` ✔
.. image:: applications/iparapheur_logo.png :doc:`i-Parapheur<applications/iparapheur>` ✔
.. image:: applications/itsm-ng.png :doc:`ITSM-NG<applications/itsm-ng>` ✔ ✔
.. image:: applications/logo-jitsimeet.png :doc:`Jitsi Meet<applications/jitsimeet>` ✔
.. image:: applications/liferay_logo.png :doc:`Liferay<applications/liferay>` ✔
.. image:: applications/limesurvey_logo.png :doc:`LimeSurvey<applications/limesurvey>` ✔

BIN
doc/sources/admin/applications/itsm-ng.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 20 KiB

64
doc/sources/admin/applications/itsm-ng.rst Normal file
View File

@ -0,0 +1,64 @@
ITSM NG
=======
|image0|
Presentation
------------
`ITSM-NG <https://www.itsm-ng.org/>`__ is a fork of GLPI. The software's main features are: assets management, IT inventory, service desk, dashboards, KB...
ITSM-NG is compatible with OpenID Connect protocol.
OpenID Connect
--------------
Configuring ITSM-NG
^^^^^^^^^^^^^^^^^^^
The configuration steps are described on `ITSM-NG wiki <https://wiki.itsm-ng.org/oidc/>`__.
Just set LemonLDAP::NG main portail URL in ``Provider`` field, and define ``Client ID`` and ``Client Secret``.
Configuring LemonLDAP::NG
^^^^^^^^^^^^^^^^^^^^^^^^^
If not done yet, configure LemonLDAP::NG as an
:doc:`OpenID Connect service<..//openidconnectservice>`.
Then add ITSM-NG as a :doc:`new OpenID Connect Relying Party<..//idpopenidconnect>`
using the following parameters:
* **Client ID**: the same you set in ITSM-NG configuration
* **Client Secret**: the same you set in ITSM-NG configuration
* Add the following **exported attributes**:
* **given_name**: user's givenName attribute
* **family_name**: user's sn attribute
* **email**: user's mail attribute
* **Login and Logout Redirect URIs**: The main URL of ITSM-NG instance
Configuration sample using CLI:
::
$ /usr/libexec/lemonldap-ng/bin/lemonldap-ng-cli -yes 1 \
addKey \
oidcRPMetaDataExportedVars/itsmng given_name givenName \
oidcRPMetaDataExportedVars/itsmng family_name sn \
oidcRPMetaDataExportedVars/itsmng email mail \
oidcRPMetaDataOptions/itsmng oidcRPMetaDataOptionsClientID myClientId \
oidcRPMetaDataOptions/itsmng oidcRPMetaDataOptionsClientSecret myClientSecret \
oidcRPMetaDataOptions/itsmng oidcRPMetaDataOptionsRedirectUris 'https://itsmng.example.com' \
oidcRPMetaDataOptions/itsmng oidcRPMetaDataOptionsPostLogoutRedirectUris 'https://itsmng.example.com' \
oidcRPMetaDataOptions/itsmng oidcRPMetaDataOptionsIDTokenSignAlg RS512 \
oidcRPMetaDataOptions/itsmng oidcRPMetaDataOptionsIDTokenExpiration 3600 \
oidcRPMetaDataOptions/itsmng oidcRPMetaDataOptionsAccessTokenExpiration 3600 \
oidcRPMetaDataOptions/itsmng oidcRPMetaDataOptionsBypassConsent 1
.. tip::
Declare all attributes that you need to map in ITSM-NG configuration. These attributes must be returned by the scopes requested by ITSM-NG.
.. |image0| image:: /applications/itsm-ng.png
:class: align-center