---
title: "Nbanye otu na nhazi akaụntụ"
description: "Nbanye otu site na OpenID Connect ma ọ bụ SAML, nhazi SCIM na LDAP."
image: "https://docs.quirelms.com/og.png"
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.quirelms.com/ig/llms.txt
> Use this file to discover all available pages before exploring further.

# Nbanye otu na nhazi akaụntụ

<span id="single-sign-on-and-provisioning"></span>

Mee ka ndị mmadụ jiri akaụntụ ha nwere banye na Quire, debe ndepụta ndị ọrụ
Quire ka ọ kwekọọ na ndekọ ndị ọrụ gị.

<figure class="quire-shot" lang="en" dir="ltr"><img src="/screenshots/admin-sign-in.webp" alt="The Sign-in and security page, where single sign-on is switched on under sign-in methods." width="944" height="760" loading="lazy" decoding="async"><figcaption>Switch on single sign-on under Sign-in methods, then add your identity provider.</figcaption></figure>

Mepee `/admin/security/auth`, soro **Identity providers and directories**, tinye
njikọ. Njikọ nke ọ bụla na-egosi adreesị onye na-enye njirimara gị chọrọ.

## OpenID Connect <!--quire:openid-connect-->

Ọ na-arụ ọrụ na Microsoft Entra ID, Google Workspace, Okta, Auth0, Keycloak na
onye na-enye ọrụ ọ bụla na-agbaso ụkpụrụ.

1. N'ime onye na-enye njirimara gị, mepụta ngwa weebụ. Tọọ adreesị ntụgharị ya
   ka ọ bụrụ **callback address** Quire gosiri maka njikọ ahụ:
   `https://<organisation>.quirelms.com/api/auth/sso/callback/<connection>`.
2. Na Quire, họrọ **Add OpenID Connect**, tinye adreesị nchọpụta onye na-enye
   ọrụ (nke na-agwụ na `/.well-known/openid-configuration`), client ID na client
   secret. A na-echekwa nzuzo ahụ emechiri emechi; naanị mkpụrụedemede anọ
   ikpeazụ ka a na-egosi ọzọ.
3. Họrọ ngalaba email njikọ a na-eje ozi. A na-eziga onye jiri adreesị ngalaba
   ahụ banye na onye na-enye ọrụ gị.

### Ihe ndị na-ere ọrụ kwuru <!--quire:vendor-notes-->

- **Microsoft Entra ID**: jiri adreesị nchọpụta tenant nke ya
  (`https://login.microsoftonline.com/<directory id>/v2.0/.well-known/openid-configuration`),
  ọ bụghị `common`. Quire na-abanye ndị mmadụ site na nkwupụta `email`, nke Entra
  na-eziga naanị maka akaụntụ nwere adreesị ozi. Iji jikọta otu na ọrụ, tinye
  nkwupụta otu na ID token ma jikọta ID ihe otu. Ọ bụrụ na otu karịrị 200, Entra
  na-eziga pointer kama ndepụta ahụ, Quire anaghị enye ọrụ otu; ya mere kenye ngwa
  ahụ n'otu ụfọdụ ma ọ bụ jiri ọrụ ngwa.
- **Okta**: jiri `https://<your-domain>/.well-known/openid-configuration` (ma ọ bụ
  adreesị `/oauth2/<server>` maka sava ikike omenala), tinye scope `groups` na
  nkwupụta otu, jikọta aha otu ndị ahụ. Nhọrọ ibe nbanye **Okta** (n'okpuru
  social sign-in) chọrọ naanị ngalaba Okta gị dịka `acme.okta.com`, client ID na
  nzuzo.
- **Google Workspace**: jiri
  `https://accounts.google.com/.well-known/openid-configuration`, depụta ngalaba
  gị n'ime njikọ ka ghara ịbanye akaụntụ si na ngalaba ọzọ.

## SAML 2.0 <!--quire:saml-2-0-->

Nbanye otu SAML dị n'atụmatụ Business na ndị ka elu (lee [atụmatụ na ụgwọ](/ig/admin/plans/)).
N'atụmatụ na-enweghị ya, ịnweghị ike itinye njikọ. Ọ bụrụ na atụmatụ emechaa tufuo
ya, njikọ dị adị ka nwere ike ịgụ ma a na-ewepụ ya na ụzọ nbanye; hazie ụzọ ọzọ
ị ga-esi bata tupu i wedata atụmatụ.

1. Na Quire, họrọ **Add SAML 2.0**. Nye onye na-enye njirimara gị nkọwa Quire:
   - **Metadata**: `https://<organisation>.quirelms.com/api/auth/sso/saml2/sp/metadata`
   - **Assertion consumer service (ACS)**:
     `https://<organisation>.quirelms.com/api/auth/sso/saml2/sp/acs/<connection>`
2. Site n'aka onye na-enye njirimara gị, nye Quire adreesị metadata ya, ma ọ bụ
   mado XML metadata ya, ma ọ bụ tinye adreesị nbanye na asambodo mbinye aka ya.
3. Zipu adreesị email dịka name ID, aha na aha ezinụlọ dịka attributes.

   **Microsoft Entra ID** na-eziga email dịka
   `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress`, aha dịka
   `http://schemas.microsoft.com/identity/claims/displayname`, otu dịka
   `http://schemas.microsoft.com/ws/2008/06/identity/claims/groups`; tinye aha
   ndị a na njikọ attributes. **Okta** na-eziga statements attribute ọ bụla i
   kọwara; jiri `email`, `displayName` na statement attribute otu `groups`. Ụdị
   name ID ọ bụla na-arụ ọrụ n'ihi na Quire na-agụ email site na attribute.

## Nnwale <!--quire:testing-->

Jiri akaụntụ nnwale banye site na windo nchọgharị nkeonwe tupu ị gwa mmadụ niile.
Debe otu onye nchịkwa nwere ike iji paswọọdụ banye ruo mgbe e gosipụtara nbanye
otu, ka nhazi na-ezighi ezi ghara igbochi onye ọ bụla ịbanye.

## Nhazi akaụntụ site na SCIM <!--quire:provisioning-with-scim-->

SCIM 2.0 na-eme ka ndekọ gị nwee ike ịmepụta, melite ma kwụsị ndị ọrụ Quire,
na-elekọta ndị otu, n'enweghị onye bulite spreadsheet.

1. Na `/admin/security/auth`, n'okpuru **User provisioning (SCIM)**, mepụta token.
   A na-egosi ya naanị otu ugboro.
2. N'ime ntọala nhazi onye na-enye njirimara, tọọ adreesị SCIM ka ọ bụrụ
   `https://<organisation>.quirelms.com/scim/v2`, tinye token dịka bearer token.
3. Kenye ndị ọrụ na otu na ngwa ahụ.

Iwepụ mmadụ na ndekọ na-akwụsị akaụntụ ya na Quire kama ihichapụ ya, ya mere a
na-edobe akara na asambodo ya. Mgbanwe ọ bụla SCIM mere dị n'akwụkwọ nyocha
n'okpuru aha token ahụ.

## LDAP <!--quire:ldap-->

Maka ndekọ ụlọ ọrụ na-enweghị SAML ma ọ bụ OpenID Connect, tinye njikọ **LDAP
directory** nke nwere adreesị sava, akaụntụ njikọ na isi ebe a na-achọ ndị ọrụ.
Ndị mmadụ ga-eji paswọọdụ ndekọ ha banye, Quire na-enyocha ya na ndekọ ahụ ma
ọ naghị echekwa ya.

Source: https://docs.quirelms.com/ig/integrations/sso/index.mdx