use image from oss
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com>
Before Width: | Height: | Size: 340 KiB |
Before Width: | Height: | Size: 112 KiB |
Before Width: | Height: | Size: 97 KiB |
Before Width: | Height: | Size: 382 KiB |
Before Width: | Height: | Size: 140 KiB |
Before Width: | Height: | Size: 48 KiB |
Before Width: | Height: | Size: 274 KiB |
Before Width: | Height: | Size: 146 KiB |
|
@ -14,11 +14,11 @@ After the platform is initialized, local login is used by default. Platform admi
|
|||
|
||||
You need to enable the Dex Addon in the Addon list first to use SSO:
|
||||
|
||||

|
||||

|
||||
|
||||
After enabling the Dex Addon, we also need to upgrade the VelaUX addon and open its Dex option:
|
||||
|
||||

|
||||

|
||||
|
||||
## Configure Dex Connectors
|
||||
|
||||
|
@ -31,7 +31,7 @@ Take GitHub Connector as an example, if you don't have a GitHub Oauth App, you n
|
|||
|
||||
After creating the Oauth App, configure the Dex Connector in the integration configuration page. We choose the type `GitHub`, and set the Client ID and Client Secret corresponding to the Oauth App. Note that the Redirect URI here must be the same as the `[Vela UX address]/dex/callback` previously configured when the Oauth App was created.
|
||||
|
||||

|
||||

|
||||
|
||||
### Configure LDAP Connector
|
||||
|
||||
|
@ -41,11 +41,11 @@ If you want to use LDAP for SSO, you need to set up the LDAP Connector first.
|
|||
|
||||
After selecting the Connector type as LDAP, fill in the address of the LDAP server in `Host`, and specify `BaseDN`.
|
||||
|
||||

|
||||

|
||||
|
||||
If your LDAP does not provide anonymous authentication access, then you need to open the `Advanced Parameters`, fill in `BindDN` and `BindPW`, Connector will use these credentials for user search.
|
||||
|
||||

|
||||

|
||||
|
||||
> For more types of Dex Connectors, please refer to [Dex Connectors Configuration](../how-to/dashboard/config/dex-connectors).
|
||||
|
||||
|
@ -57,16 +57,16 @@ Since the newly logged in user does not have any permissions, we need to set an
|
|||
|
||||
After configuring the user email, we can change the login method to SSO login in the platform configuration page.
|
||||
|
||||

|
||||

|
||||
|
||||
## Use SSO Login
|
||||
|
||||
Log out and refresh the page again, you can see that we have entered the Dex login page.
|
||||
|
||||

|
||||

|
||||
|
||||
Then, you select GitHub or LDAP to login.
|
||||
|
||||

|
||||

|
||||
|
||||
So far, we have successfully completed SSO login with GitHub. At this point, if the email of the logged in user can be associated with the email of the previously logged in user, the newly logged in user will inherit the permissions of the previous user.
|
Before Width: | Height: | Size: 340 KiB |
Before Width: | Height: | Size: 112 KiB |
Before Width: | Height: | Size: 97 KiB |
Before Width: | Height: | Size: 382 KiB |
Before Width: | Height: | Size: 140 KiB |
Before Width: | Height: | Size: 48 KiB |
Before Width: | Height: | Size: 274 KiB |
Before Width: | Height: | Size: 146 KiB |
|
@ -14,11 +14,11 @@ title: 使用单点登录
|
|||
|
||||
要想使用 Dex,首先需要在插件页面中开启 Dex 插件:
|
||||
|
||||

|
||||

|
||||
|
||||
开启完毕后,我们还需要更新一下 VelaUX 插件,打开其 Dex 选项。同样,我们在插件列表中找到 VelaUX,进行更新:
|
||||
|
||||

|
||||

|
||||
|
||||
## 配置 Dex Connectors
|
||||
|
||||
|
@ -32,7 +32,7 @@ title: 使用单点登录
|
|||
|
||||
完成 Oauth App 的创建后,在 Vela UX 的集成配置页面中,进行 Dex Connector 的配置。我们选择类型为 `GitHub`,并且设置对应 Oauth App 的 Client ID 以及 Client Secret,注意,此处的 Redirect URI 必须与之前在创建 Oauth App 时配置的 `[Vela UX 地址]/dex/callback` 保持一致。
|
||||
|
||||

|
||||

|
||||
|
||||
### 配置 LDAP Connector
|
||||
|
||||
|
@ -42,11 +42,11 @@ title: 使用单点登录
|
|||
|
||||
选择 Connector 类型为 LDAP 后,在 Host 处填写 LDAP 服务器的地址,并且指定 BaseDN。
|
||||
|
||||

|
||||

|
||||
|
||||
如果你的 LDAP 没有提供匿名身份验证访问,那么你还需要打开高阶参数,填写 BindDN 和 BindPW,Connector 将使用这些信息进行用户的搜索。
|
||||
|
||||

|
||||

|
||||
|
||||
> 关于更多类型的 Dex Connectors 配置,请查阅 [Dex Connectors 配置](../how-to/dashboard/config/dex-connectors)
|
||||
|
||||
|
@ -58,16 +58,16 @@ title: 使用单点登录
|
|||
|
||||
配置完用户邮箱后,我们可以在平台配置页面中,将登录方式修改为 SSO 登录。
|
||||
|
||||

|
||||

|
||||
|
||||
### 使用单点登录
|
||||
|
||||
退出当前用户的登录,重新刷新页面,可以看到,我们已经进入了 Dex 的登录页面。
|
||||
|
||||

|
||||

|
||||
|
||||
你可以选择使用 GitHub 或者 LDAP 进行登录。进行选择后,授权此次登录:
|
||||
|
||||

|
||||

|
||||
|
||||
至此,我们已经成功完成了使用 GitHub/LDAP 的单点登录。此时,如果登录的用户邮箱与之前本地登录的用户邮箱能够相互关联,新登入的用户将继承之前用户的权限。
|
||||
|
|