Compare commits

...

2 Commits

Author SHA1 Message Date
400445f8f5 Merge branch 'main' into deploy-timeout 2025-06-07 19:04:42 +00:00
91e73387bf expand SSO documentation
All checks were successful
continuous-integration/drone/push Build is passing
2025-06-07 13:51:39 -04:00

View File

@ -71,12 +71,11 @@ revisions to (instead of deleting them).
- `abra app deploy <domain> -f`
- enjoy getting rid of S3 🥳
## Single Sign On with Keycloak
## Single Sign On with Keycloak/Authentik
`abra app config YOURAPPNAME`, then uncomment everything in the `OIDC_` section.
Create a new client in Keycloak:
- **Valid Redirect URIs**: `https://YOURAPPDOMAIN/auth/oidc.callback`
`abra app deploy YOURAPPDOMAIN`
- Create an OIDC client in Keycloak (in Authentik this is called a provider and application)
- Run `abra app config YOURAPPNAME`, then uncomment everything in the `OIDC_` section.
- **Valid Redirect URIs**: `https://YOURAPPDOMAIN/auth/oidc.callback`
- Reference the client/provider info to populate the `_AUTH_URI` `_TOKEN_URI` and `_USERINFO_URI` values
- Set the OIDC secret using the value from the client/provider `abra app secret insert YOURAPPNAME oidc_client_secret v1 SECRETVALUE`
- `abra app deploy YOURAPPDOMAIN`