---
title: "Shiga guda ɗaya da tanadin asusu"
description: "Shiga guda ɗaya ta OpenID Connect ko SAML, tanadin SCIM da LDAP."
image: "https://docs.quirelms.com/og.png"
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.quirelms.com/ha/llms.txt
> Use this file to discover all available pages before exploring further.

# Shiga guda ɗaya da tanadin asusu

<span id="single-sign-on-and-provisioning"></span>

Ba mutane damar shiga Quire da asusun da suke da shi, kuma ci gaba da daidaita
jerin masu amfani na Quire da kundinka.

<figure class="quire-shot" lang="en" dir="ltr"><img src="/screenshots/admin-sign-in.webp" alt="The Sign-in and security page, where single sign-on is switched on under sign-in methods." width="944" height="760" loading="lazy" decoding="async"><figcaption>Switch on single sign-on under Sign-in methods, then add your identity provider.</figcaption></figure>

Buɗe `/admin/security/auth`, sannan **Masu samar da shaidar shiga da kundin
adireshi**, domin ƙara haɗi. Kowace haɗi tana nuna adireshin da mai samar da
shaidarka ke buƙata.

## OpenID Connect <!--quire:openid-connect-->

Yana aiki da Microsoft Entra ID, Google Workspace, Okta, Auth0, Keycloak da
kowane mai samarwa mai bin ƙa'idojin fasaha.

1. A mai samar da shaidarka, ƙirƙiri manhajar yanar gizo. Saita adireshin komawa
   zuwa **adireshin callback** da Quire ya nuna don haɗin:
   `https://<organisation>.quirelms.com/api/auth/sso/callback/<connection>`.
2. A Quire, zaɓi **Ƙara OpenID Connect** sannan shigar da adireshin gano mai
   samarwa (yana ƙarewa da `/.well-known/openid-configuration`), ID na abokin aiki
   da sirrinsa. Ana adana sirri a kulle; haruffa huɗu na ƙarshe ne kawai ake sake
   nunawa.
3. Zaɓi yankunan imel da haɗin ke yi wa hidima. Duk wanda ya shiga da adireshin
   wannan yanki ana turawa ga mai samarwarka.

### Bayanan masu samarwa <!--quire:vendor-notes-->

- **Microsoft Entra ID**: yi amfani da adireshin gano na kundin kansa
  (`https://login.microsoftonline.com/<directory id>/v2.0/.well-known/openid-configuration`),
  ba `common` ba. Quire yana shiga da ikirarin `email`, wanda Entra ke aikawa ga
  asusun da ke da adireshin imel kawai. Domin taswirar ƙungiyoyi zuwa matsayi,
  ƙara ikirarin groups zuwa alamar ID sannan ka taswira ID na abu na ƙungiya.
  Idan ƙungiyoyi sun fi 200, Entra yana aika hanyar haɗi maimakon jerinsu kuma
  Quire ba ya ba da matsayin ƙungiya; saboda haka sanya manhajar ga ƙungiyoyin
  musamman ko amfani da matsayin manhaja.
- **Okta**: yi amfani da `https://<your-domain>/.well-known/openid-configuration`
  (ko adireshin `/oauth2/<server>` ga uwar garken izini na musamman), ƙara
  izinin `groups` da ikirarin groups, sannan taswira sunayen ƙungiya. Samfurin
  shafin shiga **Okta** (ƙarƙashin shiga ta sada zumunta) yana buƙatar yankin
  Okta naka kawai, kamar `acme.okta.com`, ID na abokin aiki da sirri.
- **Google Workspace**: yi amfani da
  `https://accounts.google.com/.well-known/openid-configuration` kuma lissafa
  yankinka a haɗin, domin a hana asusu daga wani yanki daban shiga.

## SAML 2.0 <!--quire:saml-2-0-->

Shiga guda ɗaya ta SAML ɓangare ne na tsarin Business da sama (duba
[tsari da biyan kuɗi](/ha/admin/plans/)). Ba za ka iya ƙara haɗi a tsari marar
fasalin ba. Idan tsari ya rasa fasalin daga baya, haɗin da ke akwai yana nan a
karantawa amma ana cire shi daga hanyoyin shiga; don haka shirya wata hanyar shiga
kafin rage daraja.

1. A Quire, zaɓi **Ƙara SAML 2.0**. Ba mai samar da shaidarka cikakkun bayanan
   Quire:
   - **Bayanan saiti**: `https://<organisation>.quirelms.com/api/auth/sso/saml2/sp/metadata`
   - **Sabis mai karɓar tabbaci (ACS)**:
     `https://<organisation>.quirelms.com/api/auth/sso/saml2/sp/acs/<connection>`
2. Daga mai samar da shaidarka, ba Quire adireshin bayanan saitinsa, ko manna
   XML na bayanan saiti, ko shigar da adireshin shigarsa da takardar shaidar sa hannu.
3. Aika adireshin imel a matsayin ID na suna, da sunan farko da sunan iyali
   a matsayin siffofi.

   **Microsoft Entra ID** yana aika imel a matsayin
   `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress`, suna a
   matsayin `http://schemas.microsoft.com/identity/claims/displayname` da
   ƙungiyoyi a matsayin `http://schemas.microsoft.com/ws/2008/06/identity/claims/groups`;
   shigar da sunayen a taswirar siffofi. **Okta** yana aika duk bayanan siffofin
   da ka ayyana; yi amfani da `email`, `displayName` da siffofin ƙungiya `groups`.
   Duk tsarin ID na suna yana aiki, domin Quire yana karanta imel daga siffofin.

## Gwaji <!--quire:testing-->

Shiga daga taga mai zaman kansa ta burauza da asusun gwaji kafin sanar da kowa.
Riƙe mai gudanarwa ɗaya da zai iya shiga da kalmar sirri har sai an tabbatar da
shiga guda ɗaya, domin kuskuren saiti ba zai kulle kowa waje ba.

## Tanadi da SCIM <!--quire:provisioning-with-scim-->

SCIM 2.0 yana ba kundinka damar ƙirƙira, sabuntawa da dakatar da masu amfani na
Quire, da kuma sarrafa membobin ƙungiya, ba tare da wani ya loda maƙunsar bayanai ba.

1. A `/admin/security/auth`, ƙarƙashin **Tanadin mai amfani (SCIM)**, ƙirƙiri
   alama. Ana nuna ta sau ɗaya.
2. A saitunan tanadi na mai samar da shaidarka, saita adireshin asalin SCIM zuwa
   `https://<organisation>.quirelms.com/scim/v2` da alamar a matsayin alamar bearer.
3. Sanya masu amfani da ƙungiyoyi cikin manhajar.

Cire mutum daga kundin yana dakatar da shi a Quire maimakon sharewa, saboda haka
ana riƙe maki da takardun shaidarsa. Ana rubuta kowane canjin SCIM a rajistar
tantancewa ƙarƙashin sunan alamar.

## LDAP <!--quire:ldap-->

Ga kundin gida da ba shi da SAML ko OpenID Connect, ƙara haɗin **kundin LDAP**
tare da adireshin uwar garken, asusun ɗaurewa da tushen da ake samun masu amfani
a ƙarƙashinsa. Mutane za su shiga da kalmar sirrin kundin; Quire yana duba ta a
kan kundin, kuma ba ya adana ta.

Source: https://docs.quirelms.com/ha/integrations/sso/index.mdx