| Panel | |
|---|---|
|
Supported List
...
Overview
UDMG Authentication Proxy enables the authentication of users to the UDMG Server REST API with a token mechanism to maintain the authenticated connection for a period of time. Its main purpose is to allow a user session to happen on the UDMG Admin UI which only relies on the REST API. By extension, it provides integration with other authentication mechanisms like LDAP and SSO and can be used by other UDMG Server REST clients to access the UDMG API with these additional identity providers.
The Authentication Proxy concept is split between service and provider entities.
- A service defines the target UDMG Server and the supported authentication mechanism or provider.
- A provider define the type and the actual configuration for the related identity provider, for example the address of the LDAP server and the needed entity mapping.
The combination between service and provider is flexible and allows to group per target environment or per desired authentication type.
For example, the same UDMG Authentication Proxy can be setup to give access to:
- Preproduction with LDAP authentication
- Quality Assurance with SSO SAML authentication
- Development with Local authentication
The provider types are the following:
| Name | Description |
|---|---|
| local | Standard UDMG Server authentication, usernames and passwords are stored the database. |
| saml | SAML 2.0 Provider |
| Google OAuth2 Provider | |
| ldap | LDAP Server |
| oidc | Standard OpenID ConnectorProvider |
| oauth | Standard OAuth2 Provider |
By default, the local authentication is always enabled for all services.
...
In order to provide an integration via a SSO Provider you will need to map a user with the email under the Admin UI.
LDAP
LDAP Service
| Code Block | ||
|---|---|---|
| ||
[service.local.auth.ldap] file = "ldap-config.json" |
...