pangolin_mirror/docs-v2
1
0
Fork 0
mirror of https://github.com/fosrl/docs-v2.git synced 2026-02-07 21:46:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

Continuing to update docs for 1.15.0

Browse Source
This commit is contained in:
Owen
2026-01-22 18:19:16 -08:00
parent 1e8820f110
commit 6c44067e2b
10 changed files with 296 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
manage/identity-providers/add-an-idp.mdx
View File

@@ -26,6 +26,24 @@ Here is an example using Microsoft Azure Entra ID as SSO for Pangolin:
<img src="/images/create-idp.png" />
</Frame>
## Identity Provider Types
### Organization Identity Providers
Organization identity providers are configured per organization and only apply to that specific organization. Each org can have its own identity providers, allowing for authentication methods based on the organization's needs.
<Note>
In Pangolin Enterprise you must enable `use_org_only_idp` in the [private config file](/self-host/advanced/private-config-file#param-use-org-only-idp) `privateConfig.yml`.
</Note>
### Global Identity Providers
Global identity providers are managed at the server level and not the individual organization. They can apply to all or some organizations on the server. This means you must define policies per organization to map users to specific organizations and roles within those organizations.
<Tip>
Global identity providers are the only supported method in Pangolin Community.
</Tip>
## Supported Identity Providers
### OAuth2/OIDC
@@ -40,7 +58,7 @@ This can be used to connect to any external identity provider that supports the
### Google
<Note>
Google IdP is only available in Pangolin Cloud.
Google IdP is only available in Pangolin Cloud or Pangolin Enterprise with org identity providers. See above to enable.
</Note>
Easily set up Google Workspace authentication for your organization. Users can sign in with their Google accounts and access Pangolin resources using their existing Google credentials. Perfect for organizations already using Google Workspace for email, calendar, and other services.
@@ -48,7 +66,7 @@ Easily set up Google Workspace authentication for your organization. Users can s
### Azure Entra ID
<Note>
Azure Entra ID IdP is only available in Pangolin Cloud.
Azure Entra ID IdP is only available in Pangolin Cloud or Pangolin Enterprise with org identity providers. See above to enable.
</Note>
Integrate with Microsoft's enterprise identity platform to allow users to authenticate using their Azure Active Directory accounts. Ideal for organizations using Microsoft 365 or other Azure services, providing seamless single sign-on across your Microsoft ecosystem.
@@ -56,7 +74,7 @@ Integrate with Microsoft's enterprise identity platform to allow users to authen
## How to Add an Identity Provider
<Note>
In the CE and EE, identity providers are created and managed via the Server Admin UI rather than the organization settings.
When using global IDPs, identity providers are created and managed via the Server Admin UI rather than the organization settings.
</Note>
<Steps>

4
manage/identity-providers/auto-provisioning.mdx
View File

@@ -71,9 +71,7 @@ contains(groups, 'admin') && 'Admin' || 'Member'
This example will return the string "Admin". If the user is not a member of the "admin" group, it will return "Member".
## Community Edition
In the Community Edition, identity providers are managed at the server level and not the individual organization. This means you must define policies per organization to map users to specific organizations and roles within those organizations.
## Global Identity Providers
After you create an IdP, on the edit page, you can manage organization policies via the "Organization Policies" tab. You can set default (fallback) policies, or define them on a per org basis.

8
manage/identity-providers/azure.mdx
View File

@@ -3,6 +3,10 @@ title: "Azure Entra ID"
description: "Configure Azure Entra ID Single Sign-On"
---
<Note>
Azure SSO is only available on Pangolin Cloud and Enterprise deployments. In enterprise, you must enable `use_org_only_idp` in your [private config file](/self-host/advanced/private-config-file) `privateConfig.yml`.
</Note>
The following steps will integrate Microsoft SSO using the built in Azure Entra ID identity provider in Pangolin.
<iframe
@@ -58,6 +62,6 @@ In the OAuth2/OIDC Configuration, you'll need the following fields:
When you're done, click "Create Identity Provider". Then, copy the Redirect URL in the "General" tab as you will now need this for your app registration.
## Returning to Google Developers Console
## Returning to Azure
Lastly, you'll need to return to your app registration in order to add the redirect URI created by Pangolin. On the "Overview" tab, click "Add a Redirect URI". The click "Add a platform", and select "Web". Here, you can add the redirect URL from Pangolin and click "Configure". Your configuration should now be complete. You'll now need to add an external user to Pangolin, or if you have "Auto Provision Users" enabled, you can now log in using Google SSO.
Lastly, you'll need to return to your app registration in order to add the redirect URI created by Pangolin. On the "Overview" tab, click "Add a Redirect URI". The click "Add a platform", and select "Web". Here, you can add the redirect URL from Pangolin and click "Configure". Your configuration should now be complete. You'll now need to add an external user to Pangolin, or if you have "Auto Provision Users" enabled, you can now log in using Azure SSO.

4
manage/identity-providers/google.mdx
View File

@@ -3,6 +3,10 @@ title: "Google"
description: "Configure Google Single Sign-On"
---
<Note>
Google SSO is only available on Pangolin Cloud and Enterprise deployments. In enterprise, you must enable `use_org_only_idp` in your [private config file](/self-host/advanced/private-config-file#param-use-org-only-idp) `privateConfig.yml`.
</Note>
The following steps will integrate Google SSO using the built in Google identity provider in Pangolin.
<iframe