Shiga guda ɗaya da tanadin asusu

Ba mutane damar shiga Quire da asusun da suke da shi, kuma ci gaba da daidaita jerin masu amfani na Quire da kundinka.

Buɗe /admin/security/auth, sannan Masu samar da shaidar shiga da kundin adireshi, domin ƙara haɗi. Kowace haɗi tana nuna adireshin da mai samar da shaidarka ke buƙata.

OpenID Connect

Yana aiki da Microsoft Entra ID, Google Workspace, Okta, Auth0, Keycloak da kowane mai samarwa mai bin ƙa’idojin fasaha.

1. A mai samar da shaidarka, ƙirƙiri manhajar yanar gizo. Saita adireshin komawa zuwa adireshin callback da Quire ya nuna don haɗin: https://<organisation>.quirelms.com/api/auth/sso/callback/<connection>.
2. A Quire, zaɓi Ƙara OpenID Connect sannan shigar da adireshin gano mai samarwa (yana ƙarewa da /.well-known/openid-configuration), ID na abokin aiki da sirrinsa. Ana adana sirri a kulle; haruffa huɗu na ƙarshe ne kawai ake sake nunawa.
3. Zaɓi yankunan imel da haɗin ke yi wa hidima. Duk wanda ya shiga da adireshin wannan yanki ana turawa ga mai samarwarka.

Bayanan masu samarwa

• Microsoft Entra ID: yi amfani da adireshin gano na kundin kansa (https://login.microsoftonline.com/<directory id>/v2.0/.well-known/openid-configuration), ba common ba. Quire yana shiga da ikirarin email, wanda Entra ke aikawa ga asusun da ke da adireshin imel kawai. Domin taswirar ƙungiyoyi zuwa matsayi, ƙara ikirarin groups zuwa alamar ID sannan ka taswira ID na abu na ƙungiya. Idan ƙungiyoyi sun fi 200, Entra yana aika hanyar haɗi maimakon jerinsu kuma Quire ba ya ba da matsayin ƙungiya; saboda haka sanya manhajar ga ƙungiyoyin musamman ko amfani da matsayin manhaja.
• Okta: yi amfani da https://<your-domain>/.well-known/openid-configuration (ko adireshin /oauth2/<server> ga uwar garken izini na musamman), ƙara izinin groups da ikirarin groups, sannan taswira sunayen ƙungiya. Samfurin shafin shiga Okta (ƙarƙashin shiga ta sada zumunta) yana buƙatar yankin Okta naka kawai, kamar acme.okta.com, ID na abokin aiki da sirri.
• Google Workspace: yi amfani da https://accounts.google.com/.well-known/openid-configuration kuma lissafa yankinka a haɗin, domin a hana asusu daga wani yanki daban shiga.

SAML 2.0

Shiga guda ɗaya ta SAML ɓangare ne na tsarin Business da sama (duba tsari da biyan kuɗi). Ba za ka iya ƙara haɗi a tsari marar fasalin ba. Idan tsari ya rasa fasalin daga baya, haɗin da ke akwai yana nan a karantawa amma ana cire shi daga hanyoyin shiga; don haka shirya wata hanyar shiga kafin rage daraja.

1. A Quire, zaɓi Ƙara SAML 2.0. Ba mai samar da shaidarka cikakkun bayanan Quire:

   • Bayanan saiti: https://<organisation>.quirelms.com/api/auth/sso/saml2/sp/metadata
   • Sabis mai karɓar tabbaci (ACS): https://<organisation>.quirelms.com/api/auth/sso/saml2/sp/acs/<connection>

2. Daga mai samar da shaidarka, ba Quire adireshin bayanan saitinsa, ko manna XML na bayanan saiti, ko shigar da adireshin shigarsa da takardar shaidar sa hannu.

3. Aika adireshin imel a matsayin ID na suna, da sunan farko da sunan iyali a matsayin siffofi.

   Microsoft Entra ID yana aika imel a matsayin http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress, suna a matsayin http://schemas.microsoft.com/identity/claims/displayname da ƙungiyoyi a matsayin http://schemas.microsoft.com/ws/2008/06/identity/claims/groups; shigar da sunayen a taswirar siffofi. Okta yana aika duk bayanan siffofin da ka ayyana; yi amfani da email, displayName da siffofin ƙungiya groups. Duk tsarin ID na suna yana aiki, domin Quire yana karanta imel daga siffofin.

Gwaji

Shiga daga taga mai zaman kansa ta burauza da asusun gwaji kafin sanar da kowa. Riƙe mai gudanarwa ɗaya da zai iya shiga da kalmar sirri har sai an tabbatar da shiga guda ɗaya, domin kuskuren saiti ba zai kulle kowa waje ba.

Tanadi da SCIM

SCIM 2.0 yana ba kundinka damar ƙirƙira, sabuntawa da dakatar da masu amfani na Quire, da kuma sarrafa membobin ƙungiya, ba tare da wani ya loda maƙunsar bayanai ba.

1. A /admin/security/auth, ƙarƙashin Tanadin mai amfani (SCIM), ƙirƙiri alama. Ana nuna ta sau ɗaya.
2. A saitunan tanadi na mai samar da shaidarka, saita adireshin asalin SCIM zuwa https://<organisation>.quirelms.com/scim/v2 da alamar a matsayin alamar bearer.
3. Sanya masu amfani da ƙungiyoyi cikin manhajar.

Cire mutum daga kundin yana dakatar da shi a Quire maimakon sharewa, saboda haka ana riƙe maki da takardun shaidarsa. Ana rubuta kowane canjin SCIM a rajistar tantancewa ƙarƙashin sunan alamar.

LDAP

Ga kundin gida da ba shi da SAML ko OpenID Connect, ƙara haɗin kundin LDAP tare da adireshin uwar garken, asusun ɗaurewa da tushen da ake samun masu amfani a ƙarƙashinsa. Mutane za su shiga da kalmar sirrin kundin; Quire yana duba ta a kan kundin, kuma ba ya adana ta.