-
Notifications
You must be signed in to change notification settings - Fork 23
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Auto-setup url authentication is same for all App provider companies #1151
Comments
@dhiren-singh-007 I agree, we should give the providers the possibility to setup their own user / authentication url. @MaximilianHauer fyi I've also just added the following issue: #1175 |
@dhiren-singh-007 could you please also update the documentation for auto-setup in portal-assets? |
even tough I agree with the proposed change, as the current behaviour is concept-wise works-as-designed, this shouldn't be considered a |
ignore, didn't notice the already available PR |
discussed in open meeting with @dorkabcox @typecastcloud @SanaSalem01: will not be part of 25.03 |
Current Behavior
Currently App provider can set the Auto-Setup Url only and when backend calls this endpoint ,it sends the token generated by client which is coming from environment variable.
![image](https://private-user-images.githubusercontent.com/144212607/386256494-c2a5c42b-0040-4acd-9b86-470db4a87011.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3Mzg5MzY5NTgsIm5iZiI6MTczODkzNjY1OCwicGF0aCI6Ii8xNDQyMTI2MDcvMzg2MjU2NDk0LWMyYTVjNDJiLTAwNDAtNGFjZC05Yjg2LTQ3MGRiNGE4NzAxMS5wbmc_WC1BbXotQWxnb3JpdGhtPUFXUzQtSE1BQy1TSEEyNTYmWC1BbXotQ3JlZGVudGlhbD1BS0lBVkNPRFlMU0E1M1BRSzRaQSUyRjIwMjUwMjA3JTJGdXMtZWFzdC0xJTJGczMlMkZhd3M0X3JlcXVlc3QmWC1BbXotRGF0ZT0yMDI1MDIwN1QxMzU3MzhaJlgtQW16LUV4cGlyZXM9MzAwJlgtQW16LVNpZ25hdHVyZT0yZjllZTNmZTc3Y2ZhNmM2YzgzZDNhYzc0Zjc4ZTQ1OGQ3NzQwY2EyZWJjMDUyZmQ5YjEwYWUwYjllZGY4YzI4JlgtQW16LVNpZ25lZEhlYWRlcnM9aG9zdCJ9.WSz6zXI2vvB68VkMrI0fq0JZ3waxDhFF590R53PH_yo)
So that mean App provider needs to set Central idp from operator as authority on their auto setup url.
And all App providers will have to share same client id and secret for this.
Expected Behavior
App provider should be able to set the Auth url , client Id and secret so that portal BE can access the auto setup url by using these details same like OSP callback URL
![image](https://private-user-images.githubusercontent.com/144212607/386258466-ad36ada6-1cad-4a10-815e-c3566d2406cf.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3Mzg5MzY5NTgsIm5iZiI6MTczODkzNjY1OCwicGF0aCI6Ii8xNDQyMTI2MDcvMzg2MjU4NDY2LWFkMzZhZGE2LTFjYWQtNGExMC04MTVlLWMzNTY2ZDI0MDZjZi5wbmc_WC1BbXotQWxnb3JpdGhtPUFXUzQtSE1BQy1TSEEyNTYmWC1BbXotQ3JlZGVudGlhbD1BS0lBVkNPRFlMU0E1M1BRSzRaQSUyRjIwMjUwMjA3JTJGdXMtZWFzdC0xJTJGczMlMkZhd3M0X3JlcXVlc3QmWC1BbXotRGF0ZT0yMDI1MDIwN1QxMzU3MzhaJlgtQW16LUV4cGlyZXM9MzAwJlgtQW16LVNpZ25hdHVyZT0xZWMxNTIzYWNiNzJhNDE3ZGE4MjczMTI4NmE1MTg1Njk0Y2E5MDQ2ZGU0OTMwMzA1NzZhOWQ2YzE1Mzc5MmI0JlgtQW16LVNpZ25lZEhlYWRlcnM9aG9zdCJ9.asp-AX48KzM7Uai16aUjzM_NACe9Eltu7JK3usgxFvA)
@MaximilianHauer @evegufy @Phil91 @ntruchsess
As we discussed in open meeting , i have created this issue.
Please let me know if i am missing anything here.
The text was updated successfully, but these errors were encountered: