Skip to content

Commit

Permalink
Remove console mentions from 8.5 oidc docs
Browse files Browse the repository at this point in the history
  • Loading branch information
@conceptualshark
conceptualshark committed Sep 10, 2024
1 parent 483ed65 commit 42e9146
Showing 1 changed file with 0 additions and 8 deletions.
8 changes: 0 additions & 8 deletions ...ioned_docs/version-8.5/self-managed/setup/guides/connect-to-an-oidc-provider.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -95,9 +95,6 @@ global:
clientId: <Client ID from Step 2>
clientApiAudience: <Audience from Step 2>
publicApiAudience: <Audience for using Web Modeler's API. For security reasons, use a different value than for clientApiAudience>
console:
clientId: <Client ID from Step 2>
audience: <Audience from Step 2>
```
</TabItem>
Expand Down Expand Up @@ -191,10 +188,6 @@ global:
clientApiAudience: <Client ID from Step 2>
publicApiAudience: <Audience for using Web Modeler's API. For security reasons, use a different value than for clientApiAudience>
redirectUrl: <See the Helm value in the table below>
console:
clientId: <Client ID from Step 2>
audience: <Client ID from Step 2>
redirectUrl: <See the Helm value in the table below>
connectors:
clientId: <Client ID from Step 2>
existingSecret: <Client secret from Step 5>
Expand Down Expand Up @@ -247,6 +240,5 @@ It's also important to follow the [steps described here](https://learn.microsoft
| Optimize | **Microsoft Entra ID:**<br/> `https://<OPTIMIZE_URL>/api/authentication/callback` <br/><br/> **Helm:**<br/> `https://<OPTIMIZE_URL>` | There is a fallback if you use the existing ENV vars to configure your authentication provider, if you use a custom `yaml`, you need to update your properties to match the new values in this guide.<br/><br/>When using an OIDC provider, the following features are not currently available: User permissions tab in collections, digests, `Alerts` tab in collections. |
| Tasklist | **Microsoft Entra ID:**<br/> `https://<TASKLIST_URL>/identity-callback` <br/><br/> **Helm:**<br/> `https://<TASKLIST_URL>` | |
| Web Modeler | **Microsoft Entra ID:**<br/> `https://<WEB_MODELER_URL>/login-callback` <br/><br/> **Helm:**<br/> `https://<WEB_MODELER_URL>` | Web Modeler requires two clients: one for the internal API, and one for the external/public API. <br/><br/> Required configuration variables for webapp:<br/>`OAUTH2_CLIENT_ID=[client-id]`<br/>`OAUTH2_JWKS_URL=[provider-jwks-url]`<br/>`OAUTH2_TOKEN_AUDIENCE=[client-audience]`<br/>`OAUTH2_TOKEN_ISSUER=[provider-issuer]`<br/>`OAUTH2_TYPE=[provider-type]`<br/><br/> Required configuration variables for restapi:<br/>`CAMUNDA_IDENTITY_BASEURL=[identity-base-url]`<br/>`CAMUNDA_IDENTITY_TYPE=[provider-type]`<br/>`CAMUNDA_MODELER_SECURITY_JWT_AUDIENCE_INTERNAL_API=[client-audience]`<br/>`CAMUNDA_MODELER_SECURITY_JWT_AUDIENCE_PUBLIC_API=[publicapi-audience]` (for security reasons, <strong>use a different value here than for `CAMUNDA_MODELER_SECURITY_JWT_AUDIENCE_INTERNAL_API`</strong>)<br/>`SPRING_SECURITY_OAUTH2_RESOURCESERVER_JWT_ISSUER_URI=[provider-issuer]` |
| Console | **Microsoft Entra ID:**<br/> `https://<CONSOLE_URL>` <br/><br/> **Helm:**<br/> `https://<CONSOLE_URL>` | |
| Zeebe | no redirect URI | Instead, include `tokenScope:"<Azure-AppRegistration-ClientID> /.default "`. This refers to the Helm value `global.identity.auth.zeebe.tokenScope`, which should be set to the displayed value. |
| Connectors | | Connectors act as a client in the OIDC flow. <br/><br/> For outbound-only mode (when `CAMUNDA_CONNECTOR_POLLING_ENABLED` is `false`), only Zeebe client properties are required: <br/> `ZEEBE_CLIENT_ID=[client-id]`<br/>`ZEEBE_CLIENT_SECRET=[client-secret]`<br/>`ZEEBE_AUTHORIZATION_SERVER_URL=[provider-issuer]`<br/>`ZEEBE_TOKEN_AUDIENCE=[Zeebe audience]`<br/>`ZEEBE_TOKEN_SCOPE=[Zeebe scope]` (optional)<br/><br/> For inbound mode, Operate client properties are required:<br/>`CAMUNDA_IDENTITY_TYPE=[provider-type]`<br/>`CAMUNDA_IDENTITY_AUDIENCE=[Operate audience]`<br/>`CAMUNDA_IDENTITY_CLIENT_ID=[client-id]`<br/>`CAMUNDA_IDENTITY_CLIENT_SECRET=[client-secret]`<br/>`CAMUNDA_IDENTITY_ISSUER_BACKEND_URL=[provider-issuer]` |

0 comments on commit 42e9146

Please sign in to comment.