Bug 2101770
| Summary: | [RFE] add support for authenticating against external IdP services using OAUTH2 preauthenticaiton mechanism provided by SSSD | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | anuja <amore> |
| Component: | ipa | Assignee: | Florence Blanc-Renaud <frenaud> |
| Status: | CLOSED ERRATA | QA Contact: | ipa-qe <ipa-qe> |
| Severity: | unspecified | Docs Contact: | Josip Vilicic <jvilicic> |
| Priority: | unspecified | ||
| Version: | 8.7 | CC: | jvilicic, lmanasko, pasik, rcritten, sumenon, tscherf |
| Target Milestone: | rc | Keywords: | FutureFeature, TechPreview, Triaged |
| Target Release: | --- | Flags: | pm-rhel:
mirror+
|
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | ipa-4.9.10-1.module+el8.7.0+15691+2b2c1dd5 | Doc Type: | Technology Preview |
| Doc Text: |
.RHEL IdM allows delegating user authentication to external identity providers as a Technology Preview
As a Technology Preview in RHEL IdM, you can now associate users with external identity providers (IdP) that support the OAuth 2 device authorization flow. When these users authenticate with the SSSD version available in RHEL 8.7 or later, they receive RHEL IdM single sign-on capabilities with Kerberos tickets after performing authentication and authorization at the external IdP.
Notable features include:
* Adding, modifying, and deleting references to external IdPs with `ipa idp-*` commands
* Enabling IdP authentication for users with the `ipa user-mod --user-auth-type=idp` command
For additional information, see link:https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/managing_idm_users_groups_hosts_and_access_control_rules/assembly_using-external-identity-providers-to-authenticate-to-idm_managing-users-groups-hosts[Using external identity providers to authenticate to IdM].
|
Story Points: | --- |
| Clone Of: | 2069202 | Environment: | |
| Last Closed: | 2022-11-08 09:36:24 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2103125 | ||
| Bug Blocks: | |||