Nbanye otu na nhazi akaụntụ

Mee ka ndị mmadụ jiri akaụntụ ha nwere banye na Quire, debe ndepụta ndị ọrụ Quire ka ọ kwekọọ na ndekọ ndị ọrụ gị.

Mepee /admin/security/auth, soro Identity providers and directories, tinye njikọ. Njikọ nke ọ bụla na-egosi adreesị onye na-enye njirimara gị chọrọ.

OpenID Connect

Ọ na-arụ ọrụ na Microsoft Entra ID, Google Workspace, Okta, Auth0, Keycloak na onye na-enye ọrụ ọ bụla na-agbaso ụkpụrụ.

N’ime onye na-enye njirimara gị, mepụta ngwa weebụ. Tọọ adreesị ntụgharị ya ka ọ bụrụ callback address Quire gosiri maka njikọ ahụ: https://<organisation>.quirelms.com/api/auth/sso/callback/<connection>.
Na Quire, họrọ Add OpenID Connect, tinye adreesị nchọpụta onye na-enye ọrụ (nke na-agwụ na /.well-known/openid-configuration), client ID na client secret. A na-echekwa nzuzo ahụ emechiri emechi; naanị mkpụrụedemede anọ ikpeazụ ka a na-egosi ọzọ.
Họrọ ngalaba email njikọ a na-eje ozi. A na-eziga onye jiri adreesị ngalaba ahụ banye na onye na-enye ọrụ gị.

Ihe ndị na-ere ọrụ kwuru

Microsoft Entra ID: jiri adreesị nchọpụta tenant nke ya (https://login.microsoftonline.com/<directory id>/v2.0/.well-known/openid-configuration), ọ bụghị common. Quire na-abanye ndị mmadụ site na nkwupụta email, nke Entra na-eziga naanị maka akaụntụ nwere adreesị ozi. Iji jikọta otu na ọrụ, tinye nkwupụta otu na ID token ma jikọta ID ihe otu. Ọ bụrụ na otu karịrị 200, Entra na-eziga pointer kama ndepụta ahụ, Quire anaghị enye ọrụ otu; ya mere kenye ngwa ahụ n’otu ụfọdụ ma ọ bụ jiri ọrụ ngwa.
Okta: jiri https://<your-domain>/.well-known/openid-configuration (ma ọ bụ adreesị /oauth2/<server> maka sava ikike omenala), tinye scope groups na nkwupụta otu, jikọta aha otu ndị ahụ. Nhọrọ ibe nbanye Okta (n’okpuru social sign-in) chọrọ naanị ngalaba Okta gị dịka acme.okta.com, client ID na nzuzo.
Google Workspace: jiri https://accounts.google.com/.well-known/openid-configuration, depụta ngalaba gị n’ime njikọ ka ghara ịbanye akaụntụ si na ngalaba ọzọ.

SAML 2.0

Nbanye otu SAML dị n’atụmatụ Business na ndị ka elu (lee atụmatụ na ụgwọ). N’atụmatụ na-enweghị ya, ịnweghị ike itinye njikọ. Ọ bụrụ na atụmatụ emechaa tufuo ya, njikọ dị adị ka nwere ike ịgụ ma a na-ewepụ ya na ụzọ nbanye; hazie ụzọ ọzọ ị ga-esi bata tupu i wedata atụmatụ.

Na Quire, họrọ Add SAML 2.0. Nye onye na-enye njirimara gị nkọwa Quire:
- Metadata: https://<organisation>.quirelms.com/api/auth/sso/saml2/sp/metadata
- Assertion consumer service (ACS): https://<organisation>.quirelms.com/api/auth/sso/saml2/sp/acs/<connection>
Site n’aka onye na-enye njirimara gị, nye Quire adreesị metadata ya, ma ọ bụ mado XML metadata ya, ma ọ bụ tinye adreesị nbanye na asambodo mbinye aka ya.
Zipu adreesị email dịka name ID, aha na aha ezinụlọ dịka attributes.

Microsoft Entra ID na-eziga email dịka http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress, aha dịka http://schemas.microsoft.com/identity/claims/displayname, otu dịka http://schemas.microsoft.com/ws/2008/06/identity/claims/groups; tinye aha ndị a na njikọ attributes. Okta na-eziga statements attribute ọ bụla i kọwara; jiri email, displayName na statement attribute otu groups. Ụdị name ID ọ bụla na-arụ ọrụ n’ihi na Quire na-agụ email site na attribute.

Nnwale

Jiri akaụntụ nnwale banye site na windo nchọgharị nkeonwe tupu ị gwa mmadụ niile. Debe otu onye nchịkwa nwere ike iji paswọọdụ banye ruo mgbe e gosipụtara nbanye otu, ka nhazi na-ezighi ezi ghara igbochi onye ọ bụla ịbanye.

Nhazi akaụntụ site na SCIM

SCIM 2.0 na-eme ka ndekọ gị nwee ike ịmepụta, melite ma kwụsị ndị ọrụ Quire, na-elekọta ndị otu, n’enweghị onye bulite spreadsheet.

Na /admin/security/auth, n’okpuru User provisioning (SCIM), mepụta token. A na-egosi ya naanị otu ugboro.
N’ime ntọala nhazi onye na-enye njirimara, tọọ adreesị SCIM ka ọ bụrụ https://<organisation>.quirelms.com/scim/v2, tinye token dịka bearer token.
Kenye ndị ọrụ na otu na ngwa ahụ.

Iwepụ mmadụ na ndekọ na-akwụsị akaụntụ ya na Quire kama ihichapụ ya, ya mere a na-edobe akara na asambodo ya. Mgbanwe ọ bụla SCIM mere dị n’akwụkwọ nyocha n’okpuru aha token ahụ.

LDAP

Maka ndekọ ụlọ ọrụ na-enweghị SAML ma ọ bụ OpenID Connect, tinye njikọ LDAP directory nke nwere adreesị sava, akaụntụ njikọ na isi ebe a na-achọ ndị ọrụ. Ndị mmadụ ga-eji paswọọdụ ndekọ ha banye, Quire na-enyocha ya na ndekọ ahụ ma ọ naghị echekwa ya.