sendnrw/netbird-docs
2
0
Fork 0
mirror of https://github.com/netbirdio/docs.git synced 2026-04-18 08:26:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update Azure AD docs (#173)

Browse Source
This commit is contained in:
Bethuel Mmbaga
2024-03-21 17:36:33 +03:00
committed by GitHub
parent 907ec59f5d
commit a56a607923
1 changed files with 17 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
src/pages/selfhosted/identity-providers.mdx
View File

@@ -566,7 +566,7 @@ You've configured all required resources in Authentik. You can now continue with
## Managed IDPs ## Managed IDPs
### Azure AD ### Azure AD (Microsoft Entra ID)
This guide is a part of the [NetBird Self-hosting Guide](/selfhosted/selfhosted-guide) and explains how to integrate **self-hosted** NetBird with [Azure AD](https://azure.microsoft.com/en-us/products/active-directory/). This guide is a part of the [NetBird Self-hosting Guide](/selfhosted/selfhosted-guide) and explains how to integrate **self-hosted** NetBird with [Azure AD](https://azure.microsoft.com/en-us/products/active-directory/).
@@ -639,7 +639,8 @@ In this step, we will create and configure NetBird application in azure AD.
#### Step 4. Add API permissions #### Step 4. Add API permissions
- Add `Netbird` permissions Add `Netbird` permissions
- Click `API permissions` on the left menu - Click `API permissions` on the left menu
- Click `Add a permission` - Click `Add a permission`
- Click `My APIs` tab, and select `Netbird`. Next check `api` permission checkbox and click `Add permissions`. - Click `My APIs` tab, and select `Netbird`. Next check `api` permission checkbox and click `Add permissions`.
@@ -648,7 +649,8 @@ In this step, we will create and configure NetBird application in azure AD.
<img src="/docs-static/img/integrations/identity-providers/self-hosted/azure-netbird-api-permisssions.png" alt="high-level-dia" className="imagewrapper"/> <img src="/docs-static/img/integrations/identity-providers/self-hosted/azure-netbird-api-permisssions.png" alt="high-level-dia" className="imagewrapper"/>
</p> </p>
- Add `Delagated permissions` to Microsoft Graph Add `Delegated permissions` to Microsoft Graph
- Click `Add a permission` - Click `Add a permission`
- Click `Microsoft Graph` and then click `Application permissions` tab - Click `Microsoft Graph` and then click `Application permissions` tab
- In `Select permissions` search for `User.Read` and under the `User` section select `User.Read.All` and click `Add permissions` - In `Select permissions` search for `User.Read` and under the `User` section select `User.Read.All` and click `Add permissions`
@@ -658,7 +660,7 @@ In this step, we will create and configure NetBird application in azure AD.
</p> </p>
- Click `Grant admin conset for Default Directory` and click `Yes` - Click `Grant admin consent for Default Directory` and click `Yes`
<p> <p>
<img src="/docs-static/img/integrations/identity-providers/self-hosted/azure-grant-admin-conset.png" alt="high-level-dia" className="imagewrapper"/> <img src="/docs-static/img/integrations/identity-providers/self-hosted/azure-grant-admin-conset.png" alt="high-level-dia" className="imagewrapper"/>
@@ -680,9 +682,12 @@ In this step, we will create and configure NetBird application in azure AD.
<img src="/docs-static/img/integrations/identity-providers/self-hosted/azure-client-secret.png" alt="high-level-dia" className="imagewrapper"/> <img src="/docs-static/img/integrations/identity-providers/self-hosted/azure-client-secret.png" alt="high-level-dia" className="imagewrapper"/>
</p> </p>
- Click `Overview` on left menu and take note of `Application (client) ID`, `Object ID` and `Directory (tenant) ID`
will be required in next step.
Your authority OIDC configuration will be available under: Your authority OIDC configuration will be available under:
```bash ```bash
https://login.microsoftonline.com/<TENANT_ID>/v2.0/.well-known/openid-configuration https://login.microsoftonline.com/<Directory (tenant) ID>/v2.0/.well-known/openid-configuration
``` ```
<Note> <Note>
Double-check if the endpoint returns a JSON response by calling it from your browser. Double-check if the endpoint returns a JSON response by calling it from your browser.
@@ -691,21 +696,22 @@ https://login.microsoftonline.com/<TENANT_ID>/v2.0/.well-known/openid-configurat
- Set properties in the `setup.env` file: - Set properties in the `setup.env` file:
```shell ```shell
NETBIRD_DOMAIN="<YOUR_DOMAIN>" NETBIRD_DOMAIN="<YOUR_DOMAIN>"
NETBIRD_AUTH_OIDC_CONFIGURATION_ENDPOINT="https://login.microsoftonline.com/<TENANT_ID>/v2.0/.well-known/openid-configuration" NETBIRD_AUTH_OIDC_CONFIGURATION_ENDPOINT="https://login.microsoftonline.com/<Directory (tenant) ID>/v2.0/.well-known/openid-configuration"
NETBIRD_USE_AUTH0=false NETBIRD_USE_AUTH0=false
NETBIRD_AUTH_CLIENT_ID="<APPLICATION_ID>" NETBIRD_AUTH_CLIENT_ID="<Application (client) ID>"
NETBIRD_AUTH_SUPPORTED_SCOPES="openid profile email offline_access api://<APPLICATION_ID>/api" NETBIRD_AUTH_SUPPORTED_SCOPES="openid profile email offline_access User.Read api://<Application (client) ID>/api"
NETBIRD_AUTH_AUDIENCE="<APPLICATION_ID>" NETBIRD_AUTH_AUDIENCE="<Application (client) ID>"
NETBIRD_AUTH_REDIRECT_URI="/auth" NETBIRD_AUTH_REDIRECT_URI="/auth"
NETBIRD_AUTH_SILENT_REDIRECT_URI="/silent-auth" NETBIRD_AUTH_SILENT_REDIRECT_URI="/silent-auth"
NETBIRD_AUTH_USER_ID_CLAIM="oid" NETBIRD_AUTH_USER_ID_CLAIM="oid"
NETBIRD_TOKEN_SOURCE="idToken"
NETBIRD_AUTH_DEVICE_AUTH_PROVIDER="none" NETBIRD_AUTH_DEVICE_AUTH_PROVIDER="none"
NETBIRD_MGMT_IDP="azure" NETBIRD_MGMT_IDP="azure"
NETBIRD_IDP_MGMT_CLIENT_ID="<APPLICATION_ID>" NETBIRD_IDP_MGMT_CLIENT_ID="<Application (client) ID>"
NETBIRD_IDP_MGMT_CLIENT_SECRET="<CLIENT_SECRET>" NETBIRD_IDP_MGMT_CLIENT_SECRET="<CLIENT_SECRET>"
NETBIRD_IDP_MGMT_EXTRA_OBJECT_ID="<OBJECT_ID>" NETBIRD_IDP_MGMT_EXTRA_OBJECT_ID="<Object ID>"
NETBIRD_IDP_MGMT_EXTRA_GRAPH_API_ENDPOINT="https://graph.microsoft.com/v1.0" NETBIRD_IDP_MGMT_EXTRA_GRAPH_API_ENDPOINT="https://graph.microsoft.com/v1.0"
``` ```