fixing auth ordering/links

This commit is contained in:
Denise Schannon
2018-07-09 19:10:15 -07:00
committed by Denise
parent f29f2e11bf
commit b18f4977ba
7 changed files with 32 additions and 31 deletions
@@ -17,13 +17,14 @@ You have multiple options for user authentication in Rancher:
Open source projects or organizations that use GitHub for source control may prefer that users sign in using their GitHub accounts.
- [FreeIPA](./freeipa/)
- [OpenLDAP](./openlap/)
Organizations can use OpenLDAP for authentication, allowing users to sign in using their corporate credentials.
- [FreeIPA](./freeipa/)
Organizations can use FreeIPA for authentication, allowing users to sign in using their corporate credentials.
- [OpenLDAP](./openlap/)
Organizations can use OpenLDAP for authentication, allowing users to sign in using their corporate credentials.
- [Local Authentication](./local-authentication/)
@@ -1,6 +1,6 @@
---
title: Configuring Active Directory Authentication
weight: 3075
title: Configuring Active Directory (AD)
weight: 51
---
In environments using Microsoft Active Directory (AD), you can configure Rancher to allow sign on using AD credentials.
@@ -20,7 +20,7 @@ In environments using Microsoft Active Directory (AD), you can configure Rancher
4. Complete the **Configure an Active Directory server** form.
You may need to log in to your domain controller to find the information requested in the form.
>**Using TLS?**
>Make sure you have an LDAP certificate installed.
<br/>
@@ -1,6 +1,6 @@
---
title: Configuring Azure Active Directory
weight: 3075
title: Configuring Azure Active Directory (Azure AD)
weight: 52
---
If you have an instance of Active Directory (AD) hosted in Azure, you can configure Rancher to allow your users to log in using their AD accounts. Configuration of Azure AD external authentication requires you to make configurations in both Azure and Rancher.
@@ -15,7 +15,7 @@ Configuring Rancher to allow your users to authenticate with their Azure AD acco
<a id="tip"></a>
>**Tip:** Before you start, we recommend creating an empty text file. You can use this file to copy values from Azure that you'll paste into Rancher later.
>**Tip:** Before you start, we recommend creating an empty text file. You can use this file to copy values from Azure that you'll paste into Rancher later.
1. [Register Rancher with Azure](#1-register-rancher-with-azure)
@@ -56,7 +56,7 @@ Before enabling Azure AD within Rancher, you must register Rancher with Azure.
1. From **Application type**, make sure that **Web app / API** is selected.
1. In the **Sign-on URL** field, enter the URL of your Rancher Server.
1. Click **Create**.
### 2. Create an Azure API Key
@@ -124,29 +124,29 @@ As your final step in Azure, copy the data that you'll use to configure Rancher
1. Use search to open the **Azure Active Directory** service.
![Open Azure Active Directory]({{< baseurl >}}/img/rancher/search-azure-ad.png)
1. From the **Azure Active Directory** menu, open **Properties**.
2. Copy the **Directory ID** and paste it into your [text file](#tip).
You'll paste this value into Rancher as your **Tenant ID**.
1. Obtain your Rancher **Application ID**.
1. Use search to open **App registrations**.
![Open App Registrations]({{< baseurl >}}/img/rancher/search-app-registrations.png)
1. Find the entry you created for Rancher.
1. Copy the **Application ID** and paste it to your [text file](#tip).
1. Obtain your Rancher **Graph Endpoint**, **Token Endpoint**, and **Auth Endpoint**.
1. From **App registrations**, click **Endpoints**.
![Click Endpoints]({{< baseurl >}}/img/rancher/click-endpoints.png)
2. Copy the following endpoints to your clipboard and paste them into your [text file](#tip) (these values will be your Rancher endpoint values).
- **Microsoft Azure AD Graph API Endpoint** (Graph Endpoint)
@@ -1,6 +1,6 @@
---
title: Configuring FreeIPA
weight: 5000
weight: 55
---
If your organization uses FreeIPA for user authentication, you can configure Rancher to allow your users to login using their FreeIPA credentials.
@@ -20,7 +20,7 @@ If your organization uses FreeIPA for user authentication, you can configure Ran
4. Complete the **Configure an FreeIPA server** form.
You may need to log in to your domain controller to find the information requested in the form.
>**Using TLS?**
>Make sure you have an LDAP certificate installed.
<br/>
@@ -52,4 +52,4 @@ If your organization uses FreeIPA for user authentication, you can configure Ran
**Result:**
- FreeIPA authentication is configured.
- You are signed into Rancher with your FreeIPA account (i.e., the _external principal_).
- You are signed into Rancher with your FreeIPA account (i.e., the _external principal_).
@@ -1,6 +1,6 @@
---
title: Configuring GitHub Authentication
weight: 3075
title: Configuring GitHub
weight: 53
---
In environments using GitHub, you can configure Rancher to allow sign on using GitHub credentials.
@@ -48,4 +48,4 @@ In environments using GitHub, you can configure Rancher to allow sign on using G
**Result:**
- GitHub authentication is configured.
- You are signed into Rancher with your GitHub account (i.e., the _external principal_).
- You are signed into Rancher with your GitHub account (i.e., the _external principal_).
@@ -1,10 +1,10 @@
---
title: Configuring Local Authentication
weight: 3075
weight: 56
---
Regardless of whether you use external authentication, you should create a few local authentication users so that you can continue using Rancher if you your external authentication service encounters issues.
Regardless of whether you use external authentication, you should create a few local authentication users so that you can continue using Rancher if you your external authentication service encounters issues.
1. From the **Global** view, select **Users** from the main menu.
2. Click **Add User**. Then complete the **Add User** form. Click **Create** when you're done.
2. Click **Add User**. Then complete the **Add User** form. Click **Create** when you're done.
@@ -1,6 +1,6 @@
---
title: Configuring OpenLDAP
weight: 5000
weight: 54
---
If your organization uses OpenLDAP for user authentication, you can configure Rancher to allow your users to login using their OpenLDAP credentials.
@@ -20,7 +20,7 @@ If your organization uses OpenLDAP for user authentication, you can configure Ra
4. Complete the **Configure an OpenLDAP server** form.
You may need to log in to your domain controller to find the information requested in the form.
>**Using TLS?**
>Make sure you have an LDAP certificate installed.
<br/>
@@ -52,4 +52,4 @@ If your organization uses OpenLDAP for user authentication, you can configure Ra
**Result:**
- OpenLDAP authentication is configured.
- You are signed into Rancher with your OpenLDAP account (i.e., the _external principal_).
- You are signed into Rancher with your OpenLDAP account (i.e., the _external principal_).