Commit Graph
338 Commits
Author SHA1 Message Date
Jack BaldryandMisi e48eaa567e Restructure IAM documentation (#112929)
Co-authored-by: Misi <mgyongyosi@users.noreply.github.com>
2025-10-24 12:54:59 +01:00
Anna Urbiztondo 913b303664 Docs: Change of doc name (#112847)
Change of doc
2025-10-23 12:30:40 +02:00
Mihai Doarna 9587f9374b Docs: Fix markdown syntax for config options table (#112805)
* fix markdown syntax for config options table

* yarn run prettier:write
2025-10-22 16:37:40 +03:00
linomanandJohn Troy aa8af6b798 Update Org Mapping limitations description (#112520)
* Update Org Mapping limitations description

* Update docs/sources/setup-grafana/configure-security/configure-authentication/saml/configure-saml-org-mapping/_index.md

Co-authored-by: John Troy <jtroy@users.noreply.github.com>

---------

Co-authored-by: John Troy <jtroy@users.noreply.github.com>
2025-10-16 18:56:22 +02:00
62995971a2 Docs: Manage multi-team access (#111824)
* Draft

* Fixes

* Prettier

* Fix?

* Fix?

* Links

* Paths

* Link

* Images

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Jacob Valdez <jacob.valdez@grafana.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Jacob Valdez <jacob.valdez@grafana.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Jacob Valdez <jacob.valdez@grafana.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Jacob Valdez <jacob.valdez@grafana.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Jacob Valdez <jacob.valdez@grafana.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Jacob Valdez <jacob.valdez@grafana.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Jacob Valdez <jacob.valdez@grafana.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Jacob Valdez <jacob.valdez@grafana.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Jacob Valdez <jacob.valdez@grafana.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Jacob Valdez <jacob.valdez@grafana.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Jacob Valdez <jacob.valdez@grafana.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Jacob Valdez <jacob.valdez@grafana.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Jacob Valdez <jacob.valdez@grafana.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Jacob Valdez <jacob.valdez@grafana.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Jacob Valdez <jacob.valdez@grafana.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Jacob Valdez <jacob.valdez@grafana.com>

* Link

* URIs

* add an example ref URI

* More refs

* Prettier

* adding ref URIs

Updated links to use reference format for drilldown and add-data-source sections.

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Jacob Valdez <jacob.valdez@grafana.com>

* LBAC

* Prettier

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Sarah Constant <sarahleejane@users.noreply.github.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Sarah Constant <sarahleejane@users.noreply.github.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Sarah Constant <sarahleejane@users.noreply.github.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Sarah Constant <sarahleejane@users.noreply.github.com>

* Update docs/sources/setup-grafana/configure-security/manage-single-access.md

Co-authored-by: Sarah Constant <sarahleejane@users.noreply.github.com>

* Edit

---------

Co-authored-by: Jacob Valdez <jacob.valdez@grafana.com>
Co-authored-by: Irene Rodríguez <irene.rodriguez@grafana.com>
Co-authored-by: Sarah Constant <sarahleejane@users.noreply.github.com>
2025-10-16 10:45:23 +02:00
Matheus Macabu 1c614fdc9a Docs: Add batch_wait_duration and batch_size_bytes to usage insights Loki exporter (#112408)
* Docs: Add batch_wait_duration and batch_size_bytes to usage insights Loki exporter

* Run linter
2025-10-15 12:17:53 +02:00
Vardan TorosyanandMisi f06a12717b Docs: Add a note about email being required and the usage of sub claim (#112065)
* Docs: Add a note about email being required and the usage of sub claim

* Update docs/sources/setup-grafana/configure-security/configure-authentication/generic-oauth/index.md

Co-authored-by: Misi <mgyongyosi@users.noreply.github.com>

---------

Co-authored-by: Misi <mgyongyosi@users.noreply.github.com>
2025-10-07 17:40:50 +02:00
Misi 0b639bd1f9 Chore: Rename Azure AD to Entra ID in the authentication-related docs and on the auth UIs (#111887)
* Chore: Rename Azure AD to Entra ID in the docs and on the UI

* lint

* i18n update
2025-10-03 12:35:03 +00:00
linoman f01b1131e7 SCIM - Allow groups to be deleted if SCIM group sync is disabled (#111888)
* Load SCIM configuration before running changes in teams

* Update tests

* Allow to delete groups if SCIM group sync is disabled

* Update docs
2025-10-01 16:07:18 +00:00
Clément Duveau c0d0121b41 Tag / content discrepancy (#111882) 2025-10-01 16:49:43 +02:00
linoman f58fbc793e SCIM: Update documentation mentioning that unused attributes will be ignored (#111809)
Update documentation mentioning that unused attributes will be ignored
2025-09-30 17:52:59 +02:00
Misi 54eda07b2e Docs: Cookie samesite setting clarification (#111730) 2025-09-29 16:17:28 +02:00
Irene Rodríguez a8cd068396 Refactor SCIM provisioning documentation (#111658) 2025-09-29 12:16:07 +02:00
John Troy 004f30fcb7 Docs: Fix broken links in SAML docs (#111039)
* Rename this heading to match the link in 'Request Initiation'

* Fix link to 'Configure SAML using the Grafana configuration file' and make the link text match
2025-09-26 13:33:29 -04:00
colin-stuartandlinoman 00fb2e9537 SCIM: update docs to mention SCIM UI (#110906)
* SCIM: update docs to mention SCIM UI

* simplify

* fix typo

* expand UI section, add UI references to IdP docs

* fix vale warning

* Update docs/sources/setup-grafana/configure-security/configure-scim-provisioning/_index.md

Co-authored-by: linoman <2051016+linoman@users.noreply.github.com>

---------

Co-authored-by: linoman <2051016+linoman@users.noreply.github.com>
2025-09-26 09:20:27 -05:00
Andrew Hackmann 47e6528c74 Docs: Fix link reference in Generic OAuth documentation (#111647)
Corrected the link reference for examples of setting up Generic OAuth.
2025-09-26 11:14:58 +02:00
linomanandIrene Rodríguez 8fb2b5022b SAML Catalog: Add documentation for OIN (#111193)
* Improve docs for consistency

* Add docs for Okta catalog application

* Add supported features

* Fix Markdown formatting in SAML with Okta guide

---------

Co-authored-by: Irene Rodríguez <irene.rodriguez@grafana.com>
2025-09-17 13:47:22 +02:00
Zachary SistrunkandIrene Rodríguez ac1cd43fac Documentation: Fix inconsistency in Entra SAML docs (#110314)
Co-authored-by: Irene Rodríguez <irene.rodriguez@grafana.com>
2025-09-09 09:09:39 +00:00
xavi f09f77ced4 fix(docs): Fix broken link in Entra ID SAML docs (#110367) 2025-09-01 11:29:00 +02:00
Vardan Torosyan 90ccc8fc5a Docs: Add a reference to Terraform SCIM resource (#110290)
* Docs: Add a reference to Terraform SCIM resource

* Refactor troublshooting page

* Refactor troublshooting page
2025-08-28 18:33:14 +02:00
Steffen BaarsgaardandVictor Cinaglia b047175330 Auth: Support JWT configs tls_client_ca and jwk_set_bearer_token_file (#109095)
* Auth.jwt: Support config tls_client_ca

* Auth.jwt: Support config jwk_set_bearer_token_file

* Docs: Document new JWKS url options and mention tls_skip_verify_insecure

* Docs: Fix note on JWKS response caching

* chore: Refactor getBearerToken into standalone function

* docs: Apply wording/formatting suggestions

Co-authored-by: Victor Cinaglia <victorcinaglia@gmail.com>

* chore: Simplify ca helper function using testcerts

Co-authored-by: Victor Cinaglia <victorcinaglia@gmail.com>

* chore: Update doc and add comment preventing potential erroneous optimization

Co-authored-by: Victor Cinaglia <victorcinaglia@gmail.com>

chore: Reword comment prevent an erroneous refactor

* docs: Update casing

Co-authored-by: Victor Cinaglia <victorcinaglia@gmail.com>

---------

Co-authored-by: Victor Cinaglia <victorcinaglia@gmail.com>
2025-08-26 09:50:06 -03:00
Alexandra Valentine-KetchumandIrene Rodriguez 76a20ff66b Fix typo in docs for grafana.ini security configuration options (#108848)
Co-authored-by: Irene Rodriguez <irene.rodriguez@grafana.com>
2025-08-22 09:08:24 +00:00
Matheus Macabu 91748fe115 Auditing: Document new options for recording datasource query request/response body (#109951) 2025-08-21 16:05:13 +02:00
Jacob Valdez 790b9fc1cf Docs: adjusting the audit log label info (#109088) 2025-08-11 13:25:33 -05:00
linoman da93f58921 SAML: graph api documentation (#109272)
* minor fixes

* Add Graph API troubleshooting guide

* Improve writing

* address PR comments
2025-08-07 11:46:12 +02:00
Eve Meelan 147df3de08 Pricing update: no more Cloud Advanced (#109056)
* scrub Cloud Advanced

* prettier edit
2025-08-01 16:23:58 +00:00
Mihai Doarna cef7f2b337 SCIM: Update docs with the reject_non_provisioned_users flag (#108657)
* update docs with the reject_non_provisioned_users flag

* update docs with new flag and new create user behaviour

* address feedback

* run prettier
2025-07-28 11:32:14 +03:00
renovate[bot]andAshley Harrison c94f930950 Update dependency prettier to v3.6.2 (#108689)
* Update dependency prettier to v3.6.2

* run prettier

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Ashley Harrison <ashley.harrison@grafana.com>
2025-07-25 17:47:44 +01:00
Mihai Doarna 69d3b9023c SCIM Docs: Add mapping in AzureAD for the active attribute (#108669)
add mapping in AzureAD for the active attribute
2025-07-25 18:27:15 +03:00
Mihai Doarna eeb44c1d63 Docs: Remove LDAP debug view section (#108214)
remove LDAP debug view section from docs
2025-07-22 12:32:24 +03:00
Misi 0cb6e3fe93 Docs: Add custom fields to Azure/Entra Terraform example (#108222)
Add custom fields to Azure/Entra TF example
2025-07-18 13:00:31 +02:00
Mihai Doarna 8dfb4cdfc9 SSO: Add prompt param to SSO settings (#107969)
* add prompt param to AzureAD oauth config

* yarn i18n-extract

* validate auth prompt value

* make login_prompt available for all SSO providers

* use base authCodeURL for azure and google

* add docs for the new field for azure and generic oauth

* fix typo

* fix frontend unit test

* add prompt parameter to docs for the other providers

* remove prompt from okta

* add unit tests for the other providers

* address feedback

* add back translations for prompt labels
2025-07-17 14:40:48 +03:00
linoman 807264428e SAML: Revert SAML assertion default names in documentation (#108212)
Revert SAML assertion default names in documentation
2025-07-17 13:11:48 +02:00
Misi a94647d5cc Auth: Remove ssoSettingsSAML feature toggle (#108109)
* Remove ssoSettingsSAML feature toggle

* Remove from docs + align tests

* Update workspace

* revert go.mod go.sum change

* make update-workspace without enterprise linked
2025-07-16 21:13:31 +02:00
linoman 032ea5d5b8 Update SAML configuration options (#108178) 2025-07-16 20:39:28 +02:00
linoman 91a54d0e0e SCIM: doc upgrades (#108098)
* Add public preview warning

* Add migration strategy

* Add troubleshooting guide

* Improve description

* Improve docs

* Add versbosity

* Addresss PR comments
2025-07-16 20:39:09 +02:00
Misi 92d098fdfd Auth: Make domain_hint configurable for the Azure AD/Entra ID connector (#108061)
* Make domain_hint configurable for Entra ID/Azure AD

* Add docs

* Fix + i18n gen

* Add validation to domain hint

* Remove unnecessary change
2025-07-15 12:53:19 +02:00
Jacob Valdez c20067d70a docs: Clarifying the support level of SCIM (#108034) 2025-07-11 12:53:34 -05:00
Jacob Valdez 39d7fbd66e Docs: Updating team sync admonition wording (#107990) 2025-07-11 07:25:43 -05:00
Misi 1d252de1e9 Docs: Clean up ssoSettingsApi references from docs (#107896)
* Clean up ssoSettingsApi references from docs

* lint
2025-07-09 14:22:07 +00:00
Jo 1e1fd3db38 OAuth: Add access token as third source for user info extraction (#107636)
* Add access token as third source for user info extraction

- Add extractFromAccessToken method to extract user info from JWT access tokens
- Mutualize code by creating parseUserInfoFromJSON helper method
- Rename methods for clarity: extractFromToken -> extractFromIDToken, retrieveRawIDToken -> retrieveRawJWTPayload
- Update test suite to include comprehensive access token retrieval scenarios
- Support three sources in priority order: ID token, API response, access token
- Maintain backward compatibility while adding new functionality

* Update Generic OAuth documentation to reflect access token support

- Add access token as a third source for user information extraction
- Update configuration sections to mention access tokens alongside ID tokens and UserInfo endpoint
- Document the priority order: ID token → UserInfo endpoint → access token
- Update configuration option descriptions to reflect new functionality
- Maintain consistency with implementation changes

* Refactor access token test cases to use parameter instead of hardcoded logic

- Add AccessToken field to test case struct for explicit access token specification
- Remove hardcoded string matching logic that determined access token based on test name
- Update all access token test cases to include the AccessToken field with appropriate JWT values
- Improve test maintainability and clarity by making access tokens explicit parameters
- Remove unused strings import that was only needed for the hardcoded logic

* fix doc lint

* reduce cyclomatic complexity
2025-07-08 15:38:11 +02:00
Jacob Valdez 6c2574848f Docs: Updating team sync availability (#107721) 2025-07-07 16:07:50 -05:00
Mihai Doarna 8760d280f7 Docs: Fix links from supported providers in team sync page (#107468)
fix links from supported providers to team sync
2025-07-02 10:02:53 +03:00
linoman dbef739814 SCIM: Update authentication features table (#107299)
* Update authentication features table
2025-06-27 16:58:29 +02:00
Mariell Hoversholm 694a58372e Config: Fix docs typo'd section name (#106982) 2025-06-25 08:04:32 +02:00
Jack Baldry 244ffad99d Fix all the old usage of admonition syntax (#106984) 2025-06-19 17:31:13 +01:00
Mihai Doarna 96f1582c36 Docs: Remove api key references from docs (#106134)
remove api key references from docs
2025-06-17 18:20:08 +03:00
linoman 3f2d2ec38c SAML catalog: Set default values for SAML assertion - docs (#106773)
Update documnetation references
2025-06-16 17:50:29 +02:00
Matheus Macabu ed1da3456c Docs: Remove public preview card from cloud migration audit logging section (#106472) 2025-06-10 15:00:25 +02:00
linoman 9717d04039 SCIM: Add IDP specific SAML configuration (#106327)
* Add assertion_attrbiute_external_uid definition

* Add Okta specific configuration

* Add Azure AD configuration

* Expand definition and reference idp specific configuration
2025-06-05 10:50:28 +02:00