Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Install SSO service for oVirt services

Description

Today we have multiple authentication systems for our systems:

  • foreman

  • gerrit

  • jenkins

  • artifactory

  • icingna

  • ovirt-engine

  • and others..

We need to find one service that will enable SSO, it should support at least one open id service like 'fedora' or 'google'.

Activity

Show:

Anton Marchukov February 15, 2019 at 2:08 PM

We converged on google sso.

Barak Korren June 21, 2016 at 9:33 AM

I'd go with KeyCloak working exclusively against external providers. I wouldn't want to have to maintain and secure a credential database on our infra.
So far external providers worked very well for us in Gerrit.

As far as authorization goes, maybe we could do it with Gerrit groups. softwarefactory does...

Former user May 10, 2016 at 7:13 AM

I think the following setup would do what we need from the first glance. Worth investigating furhter:

IdM server

  • Keycloak

    •  

      • SAML

      • federation to LDAP

      • Social login

  • FreeIPA

    •  

      • LDAP

      • Kerberos

      • SSH key management

      • sudo management

web clients

  • use SAML to authenticate (for example mod_mellon for Apache HTTPD)
    servers

  • use Kerberos from the IPA and/or user SSH keys from it.

Won't Fix

Details

Assignee

Reporter

Priority

Parent

Created May 9, 2016 at 3:58 PM
Updated August 29, 2019 at 2:12 PM
Resolved February 15, 2019 at 2:08 PM