---
title: "Hono mai kotahi me te whakarato"
description: "Te hono mai kotahi ma te OpenID Connect rānei te SAML, te whakarato SCIM me te LDAP."
image: "https://docs.quirelms.com/og.png"
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.quirelms.com/mi/llms.txt
> Use this file to discover all available pages before exploring further.

# Hono mai kotahi me te whakarato

<span id="single-sign-on-and-provisioning"></span>

Kia hono mai ngā tāngata ki a Quire me te pūkete kua āhei kē rātou, ā, kia noho
tukutahi te rārangi kaiwhakamahi o Quire me tō rārangi.

<figure class="quire-shot" lang="en" dir="ltr"><img src="/screenshots/admin-sign-in.webp" alt="The Sign-in and security page, where single sign-on is switched on under sign-in methods." width="944" height="760" loading="lazy" decoding="async"><figcaption>Switch on single sign-on under Sign-in methods, then add your identity provider.</figcaption></figure>

Tuwherahia te `/admin/security/auth`, kātia **Ngā kaitautoko tuakiri me ngā
rārangi**, kia tāpiritia tētahi hono. Ka whakaatu ia hono ngā wāhi e hiahiatia
ana e tō kaitautoko tuakiri.

## OpenID Connect <!--quire:openid-connect-->

Ka mahi me te Microsoft Entra ID, te Google Workspace, te Okta, te Auth0, te
Keycloak me ia kaiwhakarato e whakarite ana ki ngā tūkanga.

1. I tō kaitautoko tuakiri, hangahia tētahi taupānga ipurangi. Tautuhia tōna wāhi
   whakawhiri ki te **wāhi whakahoki** e whakaatuhia a Quire mō te hono:
   `https://<organisation>.quirelms.com/api/auth/sso/callback/<connection>`.
2. I roto i a Quire, kōwhiria te **Tāpiritia te OpenID Connect**, ā, tuhinitia te
   wāhi tūhuratanga o te kaiwhakarato (e mutu ana i te
   `/.well-known/openid-configuration`), te ID o te kaihoko me te kupu tūmataiti o
   te kaihoko. Ka kāingia te kupu tūmataiti i te wā tiakina; ko ōna pātuhi e whā
   o te mutunga anake te whakaaturia anō.
3. Kōwhiria ēhea rohe īmēra e ārahi ana te hono. Ka tukuna te tāngata e hono mai
   ana me tētahi wāhi i tērā rohe ki tō kaitautoko.

### Tuhipoka kaihoko <!--quire:vendor-notes-->

- **Microsoft Entra ID**: whakamahia te wāhi tūhuratanga ōna ake o te rōpū
  (`https://login.microsoftonline.com/<directory id>/v2.0/.well-known/openid-configuration`),
  ehara i te `common`. Ka tāia a Quire ngā tāngata ma te tohu `email`, ka tuku
  ana te Entra i tēnei anake mō ngā pūkete me te wāhi īmēra. Kia tatauru ngā
  rōpū ki ngā tūwāhi, tāiritia te tohu ingoa groups ki te tohu ID, ā, tataurua
  ngā id o ngā āhuatanga rōpū. Mēnā nui atu i te 200 ngā rōpū, ka tuku te Entra
  tētahi tohutohu ehara i te rārangi, ā, ka kore e tuku a Quire i tētahi tūwāhi
  rōpū, nō reira tāhono atu te taupānga ki ngā rōpū motuhake rānei whakamahia
  ngā tūwāhi taupānga.
- **Okta**: whakamahia `https://<your-domain>/.well-known/openid-configuration`
  (rānei tētahi wāhi `/oauth2/<server>` mō tētahi tūmau whakaae motuhake),
  tāiritia te rohe `groups` me tētahi tohu ingoa groups, ā, tataurua ngā ingoa
  rōpū. Te whakarite tūtohu hono mai **Okta** (i raro i te hono mai pāpori) ka
  hiahiatia anake tō rohe Okta, pērēi i te `acme.okta.com`, te ID o te kaihoko
  me te kupu tūmataiti.
- **Google Workspace**: whakamahia
  `https://accounts.google.com/.well-known/openid-configuration` ā, tuhia tō
  rohe i te hono, kia kore e hono mai te pūkete i tētahi atu rohe.

## SAML 2.0 <!--quire:saml-2-0-->

Kei roto te hono mai kotahi SAML i te pereke Business me ērā atu (tirohia
[pereke me ngā utu](/mi/admin/plans/)). I tētahi pereke kāore, kāore e taea te
tāpiritanga i tētahi hono. Mēnā ka ngaro tētahi pereke i tērā i muri mai, ka noho
e taea ana te pānui tētahi hono e āhei kē, engari ka wehea ia i ngā ara hono mai,
nō reira whakarite he ara atu mō te hono i mua i te heke.

1. I roto i a Quire, kōwhiria te **Tāpiritia te SAML 2.0**. Hoatu ki tō
   kaitautoko tuakiri ngā mōhiohio o Quire:
   - **Metadata**: `https://<organisation>.quirelms.com/api/auth/sso/saml2/sp/metadata`
   - **Te ratonga kaiwhakautu whakaaetanga (ACS)**:
     `https://<organisation>.quirelms.com/api/auth/sso/saml2/sp/acs/<connection>`
2. Mai i tō kaitautoko tuakiri, hoatu ki a Quire tōna wāhi metadata, tāpiritia
   tōna metadata XML, rānei tuhinitia tōna wāhi hono mai me tōna tiwhikete
   tāia.
3. Tukuna te wāhi īmēra hei tohu ingoa, ā, te ingoa tuatahi me te ingoa
   whakapapa hei āhuatanga.

   **Microsoft Entra ID** ka tuku te īmēra ma te
   `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress`, te
   ingoa ma te `http://schemas.microsoft.com/identity/claims/displayname` ā, ngā
   rōpū ma te `http://schemas.microsoft.com/ws/2008/06/identity/claims/groups`;
   tuhinitia ēnei ingoa hei whakarite āpure. Ka tuku te **Okta** i ia tūturu
   āhuatanga e tautuhia ana e koe; whakamahia te `email`, te `displayName` me
   tētahi tūturu āhuatanga rōpū ma te `groups`. E tika ana ia āhua tohu ingoa,
   i te mea ka pānui a Quire te īmēra i te āpure.

## Te whakamātau <!--quire:testing-->

Whakamātaura i te matapihi tūmataiti o te pūhukapuka me tētahi pūkete
whakamātau i mua i te kōrero ki te katoa. Kia noho tētahi kaiwhakahaere e āea
ana te hono mai ma te kupuhipa tae noa ki te whakaaetia te hono mai kotahi, kia
kore tētahi whakaturanga kāore e tika ana e ārahi i te katoa te hono mai.

## Te whakarato ma te SCIM <!--quire:provisioning-with-scim-->

Ka āea te SCIM 2.0 tō rārangi te hanga, te whakahou me te tāhi i ngā
kaiwhakamahi Quire, ā, te whakahaere i te mematanga rōpū, me te kore e tukua e te
tāngata kotahi tētahi pūrataka.

1. I te `/admin/security/auth`, i raro i te **Te whakarato kaiwhakamahi
   (SCIM)**, hangahia tētahi tohu. Ka whakaaturia ia kotahi wā.
2. I ngā tautuhinga whakarato o tō kaitautoko tuakiri, tautuhia te wāhi pū o te
   SCIM ki te `https://<organisation>.quirelms.com/scim/v2` me te tohu hei tohu
   kaiporta.
3. Tāhono atu ngā kaiwhakamahi me ngā rōpū ki te taupānga.

Ka tangohia te tāngata i te rārangi ka tāhia ia i roto i a Quire ehara i te
mukua, nō reira ka pupuria ōna tohu me ōna tohu akoranga. He rārangi ia huringa e
mahia ana e te SCIM kei te rārangi arotake i raro i te ingoa o te tohu.

## LDAP <!--quire:ldap-->

Mō tētahi rārangi e noho ana i tō ake wāhi, kāore he SAML rānei OpenID Connect,
tāpiritia tētahi hono **Rārangi LDAP** me te wāhi o te tūmau, tētahi pūkete hono,
me te pū i raro i a ia ka rapua ngā kaiwhakamahi. Ka hono mai ē ngā tāngata i ō
rātou kupuhipa rārangi, e tātaritia ana e Quire ki te rārangi, ā, kāore e kohia e
ia.

Source: https://docs.quirelms.com/mi/integrations/sso/index.mdx
