Nicolas Frati
e89aad09f5
[management] Enable MFA for local users ( #5804 )
...
* wip: totp for local users
* fix providers not getting populated
* polished UI and fix post_login_redirect_uri
* fix: make sure logout is only prompted from oidc flow
Signed-off-by: jnfrati <nicofrati@gmail.com >
* update templates
Signed-off-by: jnfrati <nicofrati@gmail.com >
* deps: update dex dependency
Signed-off-by: jnfrati <nicofrati@gmail.com >
* fix qube issues
Signed-off-by: jnfrati <nicofrati@gmail.com >
* replace window with globalThis on home html
Signed-off-by: jnfrati <nicofrati@gmail.com >
* fixed coderabbit comments
Signed-off-by: jnfrati <nicofrati@gmail.com >
* debug
* remove unused config and rename totp issuer
* deps: update dex reference to latest
* add dashboard post logout redirect uri to embedded config
* implemented api for mfa configuration
* update docs and config parsing
* catch error on idp manager init mfa
* fix tests
* Add remember me for MFA
* Add cookie encryption and session share between tabs
* fixed logout showing non actionable error and session cookie encription key
* fixed missing mfa settings on sql query for account
* fix code index for mfa activity
---------
Signed-off-by: jnfrati <nicofrati@gmail.com >
Co-authored-by: braginini <bangvalo@gmail.com >
2026-05-08 16:31:20 +02:00
Bethuel Mmbaga
f8745723fc
[management] Add Microsoft AD FS support for embedded Dex identity providers ( #6008 )
2026-04-28 12:42:19 +03:00
shuuri-labs
940f530ac2
[management] Legacy to embedded IdP migration tool ( #5586 )
2026-04-01 13:53:19 +02:00
Misha Bragin
59c77d0658
[self-hosted] support embedded IDP postgres db ( #5443 )
...
* Add postgres config for embedded idp
Entire-Checkpoint: 9ace190c1067
* Rename idpStore to authStore
Entire-Checkpoint: 73a896c79614
* Fix review notes
Entire-Checkpoint: 6556783c0df3
* Don't accept pq port = 0
Entire-Checkpoint: 80d45e37782f
* Optimize configs
Entire-Checkpoint: 80d45e37782f
* Fix lint issues
Entire-Checkpoint: 3eec968003d1
* Fail fast on combined postgres config
Entire-Checkpoint: b17839d3d8c6
* Simplify management config method
Entire-Checkpoint: 0f083effa20e
2026-02-27 14:52:54 +01:00
Misha Bragin
e586c20e36
[management, infrastructure, idp] Simplified IdP Management - Embedded IdP ( #5008 )
...
Embed Dex as a built-in IdP to simplify self-hosting setup.
Adds an embedded OIDC Identity Provider (Dex) with local user management and optional external IdP connectors (Google/GitHub/OIDC/SAML), plus device-auth flow for CLI login. Introduces instance onboarding/setup endpoints (including owner creation), field-level encryption for sensitive user data, a streamlined self-hosting provisioning script, and expanded APIs + test coverage for IdP management.
more at https://github.com/netbirdio/netbird/pull/5008#issuecomment-3718987393
2026-01-07 14:52:32 +01:00