Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Enable SSO

  1. In server-config.json,

    1. change "autheticationProtocol":”Kerberos”

    and
    1. In singleSignOnConfig section set following three properties

      • "relayStateUrl" : "http://<Host:poart>/app/#/ssologin"

      • "servicePrincipalKerberos":"SPN name of server"

      • "keyTabLocationKerberos":"D:\Project\Insights\InSights_Windows\Server2\INSIGHTS_HOME\.InSights\ insights_rc4.keytab"

    2. Add application host name in insightsServiceURL in server-config.json

    3. Add host information in  trustedHosts in server-config.json

  2. In uiConfig.json,

    1. change "autheticationProtocol":”Kerberos”

    and
    1. singleSignOnConfig section to "singleSignOnConfig": {
      "loginURL": "/PlatformService/user/insightsso/kerberosLogin",
      "logoutURL": ""
      },

  3. Open grafana default.ini file and enable following [auth.proxy] section, do not change other property[auth.proxy]
    enabled = true
    header_name = X-WEBAUTH-USER
    header_property = username
    auto_sign_up = true
    ldap_sync_ttl = 60
    whitelist =
    headers =

...