Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Server should implement https protocol with Apache Httpd

  • The SSO integration implemented using the SAML protocol

  • Client should have relevant SSO IDP details and configure SSO in SSO provider portal.

  • We might also need SSO provider jks file to import it in our file.

Enable SSO

  1. Mark “enableSSO” as true in In server-config.jsonMark “ssoEnabled” as true in uiConfig.json, change "autheticationProtocol":”SAML”

  2. In uiConfig.json, change "autheticationProtocol":”SAML” and singleSignOnConfig section to "singleSignOnConfig": {
    "loginURL": "/PlatformService/saml/login",
    "logoutURL": "/PlatformService/saml/logout"
    },

  3. Open grafana default.ini file and enable following [auth.proxy] section, do not change other property[auth.proxy]
    enabled = true
    header_name = X-WEBAUTH-USER
    header_property = username
    auto_sign_up = true
    ldap_sync_ttl = 60
    whitelist =
    headers =

...