Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Are there examples of configuring Identity Management locally instead of relying on Google Login? #319

Open
isaackcr opened this issue Jan 11, 2021 · 1 comment

Comments

@isaackcr
Copy link

We would like to setup a network-isolated instance of caMicroscope, including Auth/Access Control against our own internal directory. Do you have any examples of how to setup Identity Management with anything other than Google Login?

Some examples might be:
Active Directory/JWT
Tomcat/JWT
OpenLDAP/JWT

Thank you.

@birm
Copy link
Member

birm commented Jan 11, 2021

Hello and thanks for reaching out, @isaackcr

You may have noticed an environment variable called JWK_URL (https://github.com/camicroscope/Distro/blob/4fc6d406de53b98f245e8d6c6aecd9dfd0a0dded/caMicroscope.yml#L36)
This is a json web key url. It is used to verify identity tokens, and can be replaced with another jwk url to match your deployment. The only other requirement for identity tokens, currently, is that some email/username/user id is in the email or sub field of the identity jwt.

Regarding the use of a JWK url instead of some other format, that's primarily because we haven't had to use anything else. If you would like us to support other methods of JWT verification, please let us know and we'll at least try to add it in.

Finally, for completeness, we also have a self-contained identity and access management system called pathdb. As far as I'm aware, it's reasonably-easily customized, but I'll have to defer to @ebremer for more on this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants