fixing auth ordering/links

This commit is contained in:
Denise Schannon
2018-07-09 19:10:15 -07:00
committed by Denise
parent f29f2e11bf
commit b18f4977ba
7 changed files with 32 additions and 31 deletions
@@ -17,13 +17,14 @@ You have multiple options for user authentication in Rancher:
Open source projects or organizations that use GitHub for source control may prefer that users sign in using their GitHub accounts. Open source projects or organizations that use GitHub for source control may prefer that users sign in using their GitHub accounts.
- [FreeIPA](./freeipa/) - [OpenLDAP](./openlap/)
Organizations can use OpenLDAP for authentication, allowing users to sign in using their corporate credentials.
- [FreeIPA](./freeipa/)
Organizations can use FreeIPA for authentication, allowing users to sign in using their corporate credentials. Organizations can use FreeIPA for authentication, allowing users to sign in using their corporate credentials.
- [OpenLDAP](./openlap/)
Organizations can use OpenLDAP for authentication, allowing users to sign in using their corporate credentials.
- [Local Authentication](./local-authentication/) - [Local Authentication](./local-authentication/)
@@ -1,6 +1,6 @@
--- ---
title: Configuring Active Directory Authentication title: Configuring Active Directory (AD)
weight: 3075 weight: 51
--- ---
In environments using Microsoft Active Directory (AD), you can configure Rancher to allow sign on using AD credentials. In environments using Microsoft Active Directory (AD), you can configure Rancher to allow sign on using AD credentials.
@@ -20,7 +20,7 @@ In environments using Microsoft Active Directory (AD), you can configure Rancher
4. Complete the **Configure an Active Directory server** form. 4. Complete the **Configure an Active Directory server** form.
You may need to log in to your domain controller to find the information requested in the form. You may need to log in to your domain controller to find the information requested in the form.
>**Using TLS?** >**Using TLS?**
>Make sure you have an LDAP certificate installed. >Make sure you have an LDAP certificate installed.
<br/> <br/>
@@ -1,6 +1,6 @@
--- ---
title: Configuring Azure Active Directory title: Configuring Azure Active Directory (Azure AD)
weight: 3075 weight: 52
--- ---
If you have an instance of Active Directory (AD) hosted in Azure, you can configure Rancher to allow your users to log in using their AD accounts. Configuration of Azure AD external authentication requires you to make configurations in both Azure and Rancher. If you have an instance of Active Directory (AD) hosted in Azure, you can configure Rancher to allow your users to log in using their AD accounts. Configuration of Azure AD external authentication requires you to make configurations in both Azure and Rancher.
@@ -15,7 +15,7 @@ Configuring Rancher to allow your users to authenticate with their Azure AD acco
<a id="tip"></a> <a id="tip"></a>
>**Tip:** Before you start, we recommend creating an empty text file. You can use this file to copy values from Azure that you'll paste into Rancher later. >**Tip:** Before you start, we recommend creating an empty text file. You can use this file to copy values from Azure that you'll paste into Rancher later.
1. [Register Rancher with Azure](#1-register-rancher-with-azure) 1. [Register Rancher with Azure](#1-register-rancher-with-azure)
@@ -56,7 +56,7 @@ Before enabling Azure AD within Rancher, you must register Rancher with Azure.
1. From **Application type**, make sure that **Web app / API** is selected. 1. From **Application type**, make sure that **Web app / API** is selected.
1. In the **Sign-on URL** field, enter the URL of your Rancher Server. 1. In the **Sign-on URL** field, enter the URL of your Rancher Server.
1. Click **Create**. 1. Click **Create**.
### 2. Create an Azure API Key ### 2. Create an Azure API Key
@@ -124,29 +124,29 @@ As your final step in Azure, copy the data that you'll use to configure Rancher
1. Use search to open the **Azure Active Directory** service. 1. Use search to open the **Azure Active Directory** service.
![Open Azure Active Directory]({{< baseurl >}}/img/rancher/search-azure-ad.png) ![Open Azure Active Directory]({{< baseurl >}}/img/rancher/search-azure-ad.png)
1. From the **Azure Active Directory** menu, open **Properties**. 1. From the **Azure Active Directory** menu, open **Properties**.
2. Copy the **Directory ID** and paste it into your [text file](#tip). 2. Copy the **Directory ID** and paste it into your [text file](#tip).
You'll paste this value into Rancher as your **Tenant ID**. You'll paste this value into Rancher as your **Tenant ID**.
1. Obtain your Rancher **Application ID**. 1. Obtain your Rancher **Application ID**.
1. Use search to open **App registrations**. 1. Use search to open **App registrations**.
![Open App Registrations]({{< baseurl >}}/img/rancher/search-app-registrations.png) ![Open App Registrations]({{< baseurl >}}/img/rancher/search-app-registrations.png)
1. Find the entry you created for Rancher. 1. Find the entry you created for Rancher.
1. Copy the **Application ID** and paste it to your [text file](#tip). 1. Copy the **Application ID** and paste it to your [text file](#tip).
1. Obtain your Rancher **Graph Endpoint**, **Token Endpoint**, and **Auth Endpoint**. 1. Obtain your Rancher **Graph Endpoint**, **Token Endpoint**, and **Auth Endpoint**.
1. From **App registrations**, click **Endpoints**. 1. From **App registrations**, click **Endpoints**.
![Click Endpoints]({{< baseurl >}}/img/rancher/click-endpoints.png) ![Click Endpoints]({{< baseurl >}}/img/rancher/click-endpoints.png)
2. Copy the following endpoints to your clipboard and paste them into your [text file](#tip) (these values will be your Rancher endpoint values). 2. Copy the following endpoints to your clipboard and paste them into your [text file](#tip) (these values will be your Rancher endpoint values).
- **Microsoft Azure AD Graph API Endpoint** (Graph Endpoint) - **Microsoft Azure AD Graph API Endpoint** (Graph Endpoint)
@@ -1,6 +1,6 @@
--- ---
title: Configuring FreeIPA title: Configuring FreeIPA
weight: 5000 weight: 55
--- ---
If your organization uses FreeIPA for user authentication, you can configure Rancher to allow your users to login using their FreeIPA credentials. If your organization uses FreeIPA for user authentication, you can configure Rancher to allow your users to login using their FreeIPA credentials.
@@ -20,7 +20,7 @@ If your organization uses FreeIPA for user authentication, you can configure Ran
4. Complete the **Configure an FreeIPA server** form. 4. Complete the **Configure an FreeIPA server** form.
You may need to log in to your domain controller to find the information requested in the form. You may need to log in to your domain controller to find the information requested in the form.
>**Using TLS?** >**Using TLS?**
>Make sure you have an LDAP certificate installed. >Make sure you have an LDAP certificate installed.
<br/> <br/>
@@ -52,4 +52,4 @@ If your organization uses FreeIPA for user authentication, you can configure Ran
**Result:** **Result:**
- FreeIPA authentication is configured. - FreeIPA authentication is configured.
- You are signed into Rancher with your FreeIPA account (i.e., the _external principal_). - You are signed into Rancher with your FreeIPA account (i.e., the _external principal_).
@@ -1,6 +1,6 @@
--- ---
title: Configuring GitHub Authentication title: Configuring GitHub
weight: 3075 weight: 53
--- ---
In environments using GitHub, you can configure Rancher to allow sign on using GitHub credentials. In environments using GitHub, you can configure Rancher to allow sign on using GitHub credentials.
@@ -48,4 +48,4 @@ In environments using GitHub, you can configure Rancher to allow sign on using G
**Result:** **Result:**
- GitHub authentication is configured. - GitHub authentication is configured.
- You are signed into Rancher with your GitHub account (i.e., the _external principal_). - You are signed into Rancher with your GitHub account (i.e., the _external principal_).
@@ -1,10 +1,10 @@
--- ---
title: Configuring Local Authentication title: Configuring Local Authentication
weight: 3075 weight: 56
--- ---
Regardless of whether you use external authentication, you should create a few local authentication users so that you can continue using Rancher if you your external authentication service encounters issues. Regardless of whether you use external authentication, you should create a few local authentication users so that you can continue using Rancher if you your external authentication service encounters issues.
1. From the **Global** view, select **Users** from the main menu. 1. From the **Global** view, select **Users** from the main menu.
2. Click **Add User**. Then complete the **Add User** form. Click **Create** when you're done. 2. Click **Add User**. Then complete the **Add User** form. Click **Create** when you're done.
@@ -1,6 +1,6 @@
--- ---
title: Configuring OpenLDAP title: Configuring OpenLDAP
weight: 5000 weight: 54
--- ---
If your organization uses OpenLDAP for user authentication, you can configure Rancher to allow your users to login using their OpenLDAP credentials. If your organization uses OpenLDAP for user authentication, you can configure Rancher to allow your users to login using their OpenLDAP credentials.
@@ -20,7 +20,7 @@ If your organization uses OpenLDAP for user authentication, you can configure Ra
4. Complete the **Configure an OpenLDAP server** form. 4. Complete the **Configure an OpenLDAP server** form.
You may need to log in to your domain controller to find the information requested in the form. You may need to log in to your domain controller to find the information requested in the form.
>**Using TLS?** >**Using TLS?**
>Make sure you have an LDAP certificate installed. >Make sure you have an LDAP certificate installed.
<br/> <br/>
@@ -52,4 +52,4 @@ If your organization uses OpenLDAP for user authentication, you can configure Ra
**Result:** **Result:**
- OpenLDAP authentication is configured. - OpenLDAP authentication is configured.
- You are signed into Rancher with your OpenLDAP account (i.e., the _external principal_). - You are signed into Rancher with your OpenLDAP account (i.e., the _external principal_).