-
Notifications
You must be signed in to change notification settings - Fork 3
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
eIAM Integration #1422
Comments
OIDC metadata for the connection to eIAM REF environment -> Info received Rene Kreidemacher |
Followed up on PKCE settings with BIT today – awaiting answer. |
Feedback BIT: Reduce request of the scope down to Open ID |
Might be solved by #1471 |
can i support with testing anything? |
@sosiology not yet, we need to merge #1471 first (cc @ptbrowne) |
After merging #1471, looks like the Sign In currently takes the user to the Keycloak Login screen. IIRC we had this once before. Maybe a configuration issue somewhere @bprusinowski? ![]() |
@adintegra I am taking a look 👍 |
I think that we get the correct information from Keycloak back, but have some problem with dealing with it afterwards. After a quick investigation it turns out it might be related to Prisma, and e.g. a different type of It's hard for me to debug this without having access to logs – I pushed a commit with a debug |
Maybe it'd be good to try and connect to abraxas servers ? It's been a long time since I have tried and it is quite painful since we have to login through a windows jump point, but it might be helpful. |
@ptbrowne it's a good idea, I can try to do it tomorrow 👍 |
Quick update: After trying out various configurations (primarily around using Keycloak as an Authentication Bridge), I believe we may not need a Keycloak instance at all, but could connect directly to the BIT OIDC trust broker. This would simplify our architecture substantially. |
I will try to change the implementation @adintegra and deploy to TEST to see if it works 👍 Thanks for the investigation 🙇♂️ |
I could login in test.visualize.admin.ch with eIAM credentials, save a chart to draft then publish it 🎉 . @sosiology |
Closing this issue as the login is available on PROD now, please re-open if i missed something @adintegra |
Enhance Visualize such that users can log in using an OIDC Identity Provider – in this case a Swiss federal login. Furthermore, they should be able to save visualizations as drafts and resume these at a later point in time.
DoD:
The text was updated successfully, but these errors were encountered: