Hono mai kotahi me te whakarato

Kia hono mai ngā tāngata ki a Quire me te pūkete kua āhei kē rātou, ā, kia noho tukutahi te rārangi kaiwhakamahi o Quire me tō rārangi.

Tuwherahia te /admin/security/auth, kātia Ngā kaitautoko tuakiri me ngā rārangi, kia tāpiritia tētahi hono. Ka whakaatu ia hono ngā wāhi e hiahiatia ana e tō kaitautoko tuakiri.

OpenID Connect

Ka mahi me te Microsoft Entra ID, te Google Workspace, te Okta, te Auth0, te Keycloak me ia kaiwhakarato e whakarite ana ki ngā tūkanga.

1. I tō kaitautoko tuakiri, hangahia tētahi taupānga ipurangi. Tautuhia tōna wāhi whakawhiri ki te wāhi whakahoki e whakaatuhia a Quire mō te hono: https://<organisation>.quirelms.com/api/auth/sso/callback/<connection>.
2. I roto i a Quire, kōwhiria te Tāpiritia te OpenID Connect, ā, tuhinitia te wāhi tūhuratanga o te kaiwhakarato (e mutu ana i te /.well-known/openid-configuration), te ID o te kaihoko me te kupu tūmataiti o te kaihoko. Ka kāingia te kupu tūmataiti i te wā tiakina; ko ōna pātuhi e whā o te mutunga anake te whakaaturia anō.
3. Kōwhiria ēhea rohe īmēra e ārahi ana te hono. Ka tukuna te tāngata e hono mai ana me tētahi wāhi i tērā rohe ki tō kaitautoko.

Tuhipoka kaihoko

• Microsoft Entra ID: whakamahia te wāhi tūhuratanga ōna ake o te rōpū (https://login.microsoftonline.com/<directory id>/v2.0/.well-known/openid-configuration), ehara i te common. Ka tāia a Quire ngā tāngata ma te tohu email, ka tuku ana te Entra i tēnei anake mō ngā pūkete me te wāhi īmēra. Kia tatauru ngā rōpū ki ngā tūwāhi, tāiritia te tohu ingoa groups ki te tohu ID, ā, tataurua ngā id o ngā āhuatanga rōpū. Mēnā nui atu i te 200 ngā rōpū, ka tuku te Entra tētahi tohutohu ehara i te rārangi, ā, ka kore e tuku a Quire i tētahi tūwāhi rōpū, nō reira tāhono atu te taupānga ki ngā rōpū motuhake rānei whakamahia ngā tūwāhi taupānga.
• Okta: whakamahia https://<your-domain>/.well-known/openid-configuration (rānei tētahi wāhi /oauth2/<server> mō tētahi tūmau whakaae motuhake), tāiritia te rohe groups me tētahi tohu ingoa groups, ā, tataurua ngā ingoa rōpū. Te whakarite tūtohu hono mai Okta (i raro i te hono mai pāpori) ka hiahiatia anake tō rohe Okta, pērēi i te acme.okta.com, te ID o te kaihoko me te kupu tūmataiti.
• Google Workspace: whakamahia https://accounts.google.com/.well-known/openid-configuration ā, tuhia tō rohe i te hono, kia kore e hono mai te pūkete i tētahi atu rohe.

SAML 2.0

Kei roto te hono mai kotahi SAML i te pereke Business me ērā atu (tirohia pereke me ngā utu). I tētahi pereke kāore, kāore e taea te tāpiritanga i tētahi hono. Mēnā ka ngaro tētahi pereke i tērā i muri mai, ka noho e taea ana te pānui tētahi hono e āhei kē, engari ka wehea ia i ngā ara hono mai, nō reira whakarite he ara atu mō te hono i mua i te heke.

1. I roto i a Quire, kōwhiria te Tāpiritia te SAML 2.0. Hoatu ki tō kaitautoko tuakiri ngā mōhiohio o Quire:

   • Metadata: https://<organisation>.quirelms.com/api/auth/sso/saml2/sp/metadata
   • Te ratonga kaiwhakautu whakaaetanga (ACS): https://<organisation>.quirelms.com/api/auth/sso/saml2/sp/acs/<connection>

2. Mai i tō kaitautoko tuakiri, hoatu ki a Quire tōna wāhi metadata, tāpiritia tōna metadata XML, rānei tuhinitia tōna wāhi hono mai me tōna tiwhikete tāia.

3. Tukuna te wāhi īmēra hei tohu ingoa, ā, te ingoa tuatahi me te ingoa whakapapa hei āhuatanga.

   Microsoft Entra ID ka tuku te īmēra ma te http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress, te ingoa ma te http://schemas.microsoft.com/identity/claims/displayname ā, ngā rōpū ma te http://schemas.microsoft.com/ws/2008/06/identity/claims/groups; tuhinitia ēnei ingoa hei whakarite āpure. Ka tuku te Okta i ia tūturu āhuatanga e tautuhia ana e koe; whakamahia te email, te displayName me tētahi tūturu āhuatanga rōpū ma te groups. E tika ana ia āhua tohu ingoa, i te mea ka pānui a Quire te īmēra i te āpure.

Te whakamātau

Whakamātaura i te matapihi tūmataiti o te pūhukapuka me tētahi pūkete whakamātau i mua i te kōrero ki te katoa. Kia noho tētahi kaiwhakahaere e āea ana te hono mai ma te kupuhipa tae noa ki te whakaaetia te hono mai kotahi, kia kore tētahi whakaturanga kāore e tika ana e ārahi i te katoa te hono mai.

Te whakarato ma te SCIM

Ka āea te SCIM 2.0 tō rārangi te hanga, te whakahou me te tāhi i ngā kaiwhakamahi Quire, ā, te whakahaere i te mematanga rōpū, me te kore e tukua e te tāngata kotahi tētahi pūrataka.

1. I te /admin/security/auth, i raro i te Te whakarato kaiwhakamahi (SCIM), hangahia tētahi tohu. Ka whakaaturia ia kotahi wā.
2. I ngā tautuhinga whakarato o tō kaitautoko tuakiri, tautuhia te wāhi pū o te SCIM ki te https://<organisation>.quirelms.com/scim/v2 me te tohu hei tohu kaiporta.
3. Tāhono atu ngā kaiwhakamahi me ngā rōpū ki te taupānga.

Ka tangohia te tāngata i te rārangi ka tāhia ia i roto i a Quire ehara i te mukua, nō reira ka pupuria ōna tohu me ōna tohu akoranga. He rārangi ia huringa e mahia ana e te SCIM kei te rārangi arotake i raro i te ingoa o te tohu.

LDAP

Mō tētahi rārangi e noho ana i tō ake wāhi, kāore he SAML rānei OpenID Connect, tāpiritia tētahi hono Rārangi LDAP me te wāhi o te tūmau, tētahi pūkete hono, me te pū i raro i a ia ka rapua ngā kaiwhakamahi. Ka hono mai ē ngā tāngata i ō rātou kupuhipa rārangi, e tātaritia ana e Quire ki te rārangi, ā, kāore e kohia e ia.