grafana

Commit Graph

Author	SHA1	Message	Date
Tiffany Hrabusa	a09df33522	[docs] Update broken links in SCIM provisioning documentation (#106298 ) Update broken links Signed-off-by: Tiffany Hrabusa <tiffany.hrabusa@grafana.com>	4 weeks ago
Mykhailo Zahlada	fc988c8771	Auth: Add Azure/Entra workload identity support (#104807 ) * fixes/adds azure workload identity authentication. Issue #78249 * Updates default values. Adds `workload_identity_token_file` defaults * Updates example config. Adds `workload_identity_token_file` * Updates docummentation: adds Federated credentials for Workload Identity * Update docs/sources/setup-grafana/configure-security/configure-authentication/azuread/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-security/configure-authentication/azuread/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Docs: add link to official documentation. Clarifies example. * 1. Add workload_identity_enabled and workload_identity_token_file settings to [auth.azuread] for workload identity support. 2. Extend OAuthInfo struct to include workload identity fields. 3. Update OAuth authentication logic to handle Azure AD workload identity using federated token as client assertion. 4. Update sample configuration and documentation for new settings. * ensure environment variable overrides are respected for OAuth SSO settings - Ensure that settings loaded in pkg/services/ssosettings/strategies/oauth_strategy.go correctly reflect environment variable overrides, matching Grafana's config behavior. - Align config loading logic with main config loader to prevent issues where INI values would override environment variables. * updates documentation * test: add workload identity configuration tests for Azure AD OAuth strategy. Add test coverage for workload_identity_enabled and workload_identity_token_file settings * feat: add workload identity support to Azure AD SSO configuration UI * updates documentation * Simplify OAuth flow by removing unnecessary switch-case structure * Small changes * Lint + i18n gen * refactor: remove redundant workload_identity_enabled setting as auth method gets defined by client_authentication * update documentation * refactor: remove redundant workload_identity_enabled setting as auth method gets defined by client_authentication * updates documentation - configuration options table: adds `client_authentication`, `workload_identity_token_file`, and `federated_credential_audience` * Small changes, lint, i18n --------- Co-authored-by: Misi <mgyongyosi@users.noreply.github.com>	1 month ago
song2park	e572af4562	docs: fix keycloak signout_redirect_url (#106191 )	1 month ago
Jacob Valdez	959ccb8ec2	Docs: Adding info on configuring CORS via reverse proxy (#104203 ) * Docs: Adding info on configuring cors via reverse proxy * Adding info regarding grafana.ini CORS configuration * some clarification and typo fixes * expanding the instructions * run prettier * fixing indentation * adjusting an admonition * adjusting information based on review	1 month ago
Jacob Hands	8734b54f90	Docs: document required return type for org_attribute_path (#105946 ) Co-authored-by: linoman <2051016+linoman@users.noreply.github.com> Co-authored-by: Irene Rodríguez <irene.rodriguez@grafana.com>	1 month ago
Irene Rodríguez	fa98a96e5d	Fix broken links (#105936 )	1 month ago
Vardan Torosyan	fbf87a9fc1	Docs: Fix SCIM availability note about Grafana Cloud (#105649 ) * Docs: Fix SCIM availability note about Grafana Cloud * SCIM and Team Sync are available in Pro	1 month ago
Mihai Doarna	1099422050	Docs: Update the page on configuring SCIM with AzureAD (#105477 ) * update the docs on configuring SCIM with AzureAD * run prettier * fix note block * fix typo	2 months ago
Jack Baldry	39e7804557	Add comments explaining what pages the aliases redirect and fix broken aliases (#105408 )	2 months ago
Mihai Doarna	039b1765a0	Docs: Update the guide on how to configure SCIM with okta (#105377 ) * update docs on how to configure SCIM with okta * fix enterprise link * add introductory paragraph under "Configure provisioning settings" This paragraph has been added to avoid stacked headings that break the flow of the documentation and hurt SEO * split SCIM connector base URL config for cloud and onprem --------- Co-authored-by: Irene Rodríguez <irene.rodriguez@grafana.com>	2 months ago
Irene Rodríguez	ed4680495a	fix broken links (#105343 )	2 months ago
colin-stuart	d05b2862b6	SCIM: update docs with externalId field & correct endpoint (#105026 ) * SCIM: update docs with externalId field * better phrasing * vale warning fix * explain where mapping is configured * clarify assertion_attribute_login * better phrasing * even better explanation * remove confusing step * remove confusing line * linter fixes * improve Integrating with SCIM Provisioning section * bigger warning about scim/saml unique identifier mismatch * lint * vale fixes * Add Integrating with SCIM Provisioning part --------- Co-authored-by: Vardan Torosyan <vardants@gmail.com>	2 months ago
Vardan Torosyan	08d7e75b5c	Docs: SAML docs refactoring (#103450 ) * Docs: SAML docs refactoring * Cleanup the root page * Update the root file * Refactor Azure AD guide * Change the order of the tree * Remove the index file again, back from main * SAML UI page review and editing * Review and edit SAML config options page * SAML signing and encryption edit/review * Remaining pages and aliases * Fix PR comments * More fixes * Update _index.md * Update _index.md * Update _index.md * Apply suggestions from code review Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Handle PR comments --------- Co-authored-by: Misi <mgyongyosi@users.noreply.github.com>	2 months ago
Vardan Torosyan	2a6736aae3	Docs: Clarify how authNZ works when SCIM is enabled (#103857 ) * Docs: Clarify how authNZ works when SCIM is enabled * Use Grafana Cloud instead of grafana.com	3 months ago
Jacob Valdez	8dfb0874a0	Docs: removing docs debt in install docs (#101750 ) * Docs: removing docs debt in install docs * cleaning up set up docs debt * fixing some vale errors * fixing broken admonition shortcode * fixing broken shortcode * fixing broken shortcode * working to the grafana authentication config * updating some more files * editing down to ldap in the repo * editing ldap doc except final section with link needed * Finishing doc debt cleanup through configure authetication * fixing shortcodes reverted by merge conflict fix * fixing admonition * fixing more broken shortcodes * adjusting some wordings ot make vale happy * updating feature toggle info	3 months ago
Vardan Torosyan	6901e21700	Docs: Grafana SCIM provisioning overview (#102183 ) * Docs: Create a landing page for SCIM provisioning * Fix docs warnings * Update docs/sources/setup-grafana/configure-security/configure-scim-provisioning/_index.md Co-authored-by: Jack Baldry <jack.baldry@grafana.com> * Update docs/sources/setup-grafana/configure-security/configure-scim-provisioning/_index.md Co-authored-by: Jack Baldry <jack.baldry@grafana.com> * Apply suggestions from code review Co-authored-by: Jack Baldry <jack.baldry@grafana.com> * Address some of the feedback and simplify few parts * Remove repetitive wording * Don't use possessive form, again * Address the feedback from PR * Docs: Manage users and teams via SCIM (#102478) * Docs: Manage users and teams via SCIM * Docs: Manage users and teams via SCIM * Refactor managing users parts * Add team sync docs * Update _index.md * Apply suggestions from code review Co-authored-by: linoman <2051016+linoman@users.noreply.github.com> * Clarify how user identity linking is working * Fix formatting * Docs: Configure SCIM with Azure and Okta (#102582) * Docs: Configure SCIM with Azure and Okta * Apply suggestions from code review Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> --------- Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> --------- Co-authored-by: linoman <2051016+linoman@users.noreply.github.com> Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Add a warning about migration from team sync * Remove the SAML setup instructions from SCIM docs * Update _index.md * Update _index.md * Apply suggestions from code review Co-authored-by: Jack Baldry <jack.baldry@grafana.com> Co-authored-by: Sarah Constant <sarahleejane@users.noreply.github.com> * Address PR feedback * Stop using possessive form * Add a note mentioning that users/teams can not be manually deleted * Update _index.md * Docs: SCIM configuration options (#103085) * Add a section to clarify how SCIM works with other IdPs * Update _index.md * Update _index.md --------- Co-authored-by: Jack Baldry <jack.baldry@grafana.com> Co-authored-by: linoman <2051016+linoman@users.noreply.github.com> Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> Co-authored-by: Sarah Constant <sarahleejane@users.noreply.github.com>	3 months ago
Eric Leijonmarck	180f579f18	Revert "Anonymous: Enforce org role Viewer setting (#102070 )" (#103043 ) This reverts commit `e216c2f29d`.	3 months ago
Vardan Torosyan	73e0db452b	Docs: Add a section to clarify how sessions are handled with SSO (#102694 ) * Docs: Add a section to clarify how sessions are handled with SSO * Add a link to SAML SLO setup	3 months ago
Eric Leijonmarck	e216c2f29d	Anonymous: Enforce org role Viewer setting (#102070 ) * Anon: Remove org role setting * remove from ini * remove setting from documentation	3 months ago
Jacob Valdez	7d435e5d84	Docs: Cleaning up configure security hardening docs (#102567 ) * Docs: Cleaning up configure security hardening docs * Adjusting layout	3 months ago
Ieva	8af271187c	Docs: Remove references to group sync (#102599 ) * remove references to group sync * remove relfref and add new link * remove relfref * Update relfref * remove relrefs and add admonitions * fix URL * remove relrefs * replace relrefs * replace relrefs * replace relrefs * replace relrefs * replace relrefs * replace relrefs * replace relrefs * replace relrefs * run prettier --------- Co-authored-by: Irene Rodríguez <irene.rodriguez@grafana.com>	3 months ago
Misi	874751d9da	Docs: AzureAD + SAML improvements (#102623 ) * Docs: AzureAD + SAML improvements * Fix	3 months ago
Quentin Bisson	aeca9a80a4	JWT: Add org role mapping support to the JWT provider (#101584 ) * add org role mapping to the jwt provider * Fix indentation for OrgMapping assignment * add-test * fix linting * add org_attribute_path * fix test * update doc * update doc * Update pkg/services/authn/clients/jwt.go * Update docs --------- Co-authored-by: Mihaly Gyongyosi <mgyongyosi@users.noreply.github.com>	3 months ago
Felix Dreissig	1e0d7102cc	Docs: Add auth for metrics to hardening page (#102475 )	3 months ago
linoman	afb058c40a	Fix URL rendering typo (#102346 ) * Fix URL rendering typo * run prettier --------- Co-authored-by: Irene Rodriguez <irene.rodriguez@grafana.com>	4 months ago
Beverly Buchanan	cf60c4e77f	Update SAML configuration steps (#101663 ) * replace relrefs and minor edits * add new content and links * Update docs/sources/setup-grafana/configure-security/configure-authentication/saml/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-security/configure-authentication/saml/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * changes from linter and content suggestions * Update docs/sources/setup-grafana/configure-security/configure-authentication/saml/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-security/configure-authentication/saml/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-security/configure-authentication/saml/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-security/configure-authentication/saml/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * run prettier --------- Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> Co-authored-by: Irene Rodriguez <irene.rodriguez@grafana.com>	4 months ago
colin-stuart	ff10186db7	Docs: Group Attribute Sync feature in private preview (#101822 ) * Docs: Group Attribute Sync feature in private preview * add link & support note * update GAS API docs	4 months ago
Robby Milo	13cf67de53	Remove relref shortcodes (#101694 ) * manually replce all shared relrefs * relref replace - grafana next * Merge branch 'master' into robbymilo/relref-replace-grafana-next * manual fixes * remove ref shortcode * Merge branch 'master' into robbymilo/relref-replace-grafana-next * prettier * fix test * update readme	4 months ago
Vardan Torosyan	801ffea206	Docs: Passwordless auth is not available in cloud (#100825 ) * Docs: Passwordless auth is not available in cloud * Update index.md --------- Co-authored-by: Irene Rodríguez <irene.rodriguez@grafana.com>	4 months ago
Ariana	d81c4b3c42	Docs: Updating SAML UI Docs for Azure specific attributes (#100565 ) * Updating SAML for Azure specific attribute structures Adding additional context surrounding SAML via Azure where the full attribute URL needs to be specified or it will not map correctly. This generates a lot of support contacts and isn't documented causing friction when organizations can't set it up themselves or lack the technical staff to self manage. * run prettier --------- Co-authored-by: Irene Rodriguez <irene.rodriguez@grafana.com>	5 months ago
Victor Cinaglia	71f97f380d	Docs: Fix URLs to auth providers from Team Sync page (#100563 ) * iam/docs: fix links to providers in team sync page * iam/docs: make auth proxy link look more like other links	5 months ago
colin-stuart	d58dec7951	Docs: Add docs for Passwordless Authentication Using Magic Links (#96877 ) * Docs: Add docs for Passwordless Authentication Using Magic Links * Update docs/sources/setup-grafana/configure-security/configure-authentication/passwordless/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-security/configure-authentication/passwordless/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-security/configure-authentication/passwordless/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * match Writer's Toolkit style * Update docs/sources/setup-grafana/configure-security/configure-authentication/passwordless/index.md Co-authored-by: Jack Baldry <jack.baldry@grafana.com> --------- Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> Co-authored-by: Jack Baldry <jack.baldry@grafana.com>	5 months ago
Misi	9df20eda77	Docs: Update SAML docs (#98809 ) * Update feature toggle name in SAML docs * Update SAML docs	6 months ago
John Naizer	79d565f285	OAuth: Support client_secret_jwt for oauth providers when doing token exchange (#95455 ) * added backend support for client_secret_jwt * added backend support for client_secret_jwt * added all logic to the exchange function (overloaded social exchange in azuread_oauth to handle managed identity client id) * ran yarn install to update lock file * added support for client_secret_jwt when managed_identity_client_id is null * added audience flag and changed exchange to directly access oauth config using .info * added logic in setting oauth.Config for supported client authentication values * added client_authentication, managed_identity_client_id, and audience to sample.ini file * using provided ctx in ManagedIdentityCallback function * added frontend support for federated identity credential auth * added client authentication field * added Azure AD documentation for Grafana * added bold font to "Add" keyword in documentation * minor wording change relating to previous commit * addressed changing audience to federated_credential_audience, moving validation, and changing managedIdentityCallback to private function * correction to audience name changing * fixed orgMappingClientAuthentication function name, and added in logic into validateFederatedCredentialAudience function * Change docs * Add iam team as owner of azcore pkg * added backend support for client_secret_jwt * added all logic to the exchange function (overloaded social exchange in azuread_oauth to handle managed identity client id) * ran yarn install to update lock file * added support for client_secret_jwt when managed_identity_client_id is null * added audience flag and changed exchange to directly access oauth config using .info * added logic in setting oauth.Config for supported client authentication values * added client_authentication, managed_identity_client_id, and audience to sample.ini file * using provided ctx in ManagedIdentityCallback function * added frontend support for federated identity credential auth * added client authentication field * added Azure AD documentation for Grafana * added bold font to "Add" keyword in documentation * minor wording change relating to previous commit * addressed changing audience to federated_credential_audience, moving validation, and changing managedIdentityCallback to private function * correction to audience name changing * fixed orgMappingClientAuthentication function name, and added in logic into validateFederatedCredentialAudience function * Change docs * Add iam team as owner of azcore pkg * updated yarn lock file * updated doc for correction * removed wrong changes in pkg directory * removed newline in dashboard-generate.yaml and unified.ts * updated yarn.lock to match upstream * Lint Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * removing unwanted changes * added back removed newline * fixed failing test in azuread_oauth_test.go * Update azuread_oauth.go removed unnecessary newline, fixed lint --------- Signed-off-by: Jack Baldry <jack.baldry@grafana.com> Co-authored-by: Mihaly Gyongyosi <mgyongyosi@users.noreply.github.com> Co-authored-by: Jack Baldry <jack.baldry@grafana.com>	6 months ago
Misi	123c860293	Docs: Configure SAML SLO properly with NameID and SessionIndex support (#98207 ) * Docs: SAML proper NameID and SessionIndex support * Address feedback * update link	6 months ago
Misi	5ecc3343db	Docs: Add org role mapping improvements to SAML docs (#98178 ) Docs: Add org role mapping improvements	7 months ago
bo0tzz	9aa23dd73f	Docs: Remove bad `info.` from generic-oauth JMESPaths (#94592 ) * Remove bad `info.` from generic-oauth JMESPaths * fix: remove nesting from example payloads * Lint --------- Co-authored-by: Mihaly Gyongyosi <mgyongyosi@users.noreply.github.com>	7 months ago
Vardan Torosyan	63d3cf93fe	Docs: Clarify when force_use_graph_api is required for Azure (#97844 )	7 months ago
Vardan Torosyan	2182f4829e	Docs: Refer to the org header usage in JWT docs (#96549 )	7 months ago
Eric Leijonmarck	2bab11e20a	Anonymous Devices: Add Before you begin section in docs (#97043 ) * add before you begin * Update docs/sources/setup-grafana/configure-security/configure-authentication/anonymous-auth/index.md	7 months ago
Ieva	2ffb7344e8	GAS: update auth provider docs (#96097 ) * add docs describing what GAS is and how it can be configured * auth provider docs for GAS * PR feedback	7 months ago
xavi	d9395f2682	Update JWT docs (#96623 )	7 months ago
Misi	7d10ffff1b	Docs: Clarify MFA/2FA in the docs (#96610 ) * Docs: Clarify MFA/2FA in the docs * Update docs/sources/setup-grafana/configure-security/configure-authentication/_index.md Co-authored-by: Vardan Torosyan <vardants@gmail.com> --------- Co-authored-by: Vardan Torosyan <vardants@gmail.com>	8 months ago
colin-stuart	f9ac3301d3	Docs: add note that support for Auth0 "audience" feature is not available (#96507 ) * add note that support for Auth0 audience feature is not available * Update docs/sources/setup-grafana/configure-security/configure-authentication/generic-oauth/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> --------- Co-authored-by: Misi <mgyongyosi@users.noreply.github.com>	8 months ago
Mihai Doarna	7d25e9ce86	docs: Add docs on generating SAML cert from the UI (#96538 ) * add docs on generating SAML cert from the UI * run prettier	8 months ago
Vardan Torosyan	97103a5256	Docs: Clarify disabling auto login for SAML and OAuth (#96520 )	8 months ago
Vardan Torosyan	26b596d351	Docs: Adding a note about how to parse JMESPath expression with a colon (#96237 ) * Docs: Adding a note about how to parse JMESPath expression with a colon --------- Co-authored-by: Irene Rodríguez <irene.rodriguez@grafana.com>	8 months ago
Mihai Doarna	c276bd1ccc	docs: Add docs on configuring role mapping for multiple GitHub teams (#96483 ) add docs on configuring role mapping for multiple GitHub teams	8 months ago
Misi	9233ad6462	Docs: Update GitLab, GitHub, Okta, Generic OAuth docs (#96386 ) * GitHub docs changes * Bunch of updates * More updates	8 months ago
Vardan Torosyan	82fdd4f03f	Docs: Clean up basic auth, anonymous access and main pages for auth configuration (#96259 ) * Docs: Clean up basic auth, anonymous access and main pages for auth configuration * Fix the typo * Prettier should fix this * fix minor typo * Update docs/sources/setup-grafana/configure-security/configure-authentication/_index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> --------- Co-authored-by: Irene Rodríguez <irene.rodriguez@grafana.com> Co-authored-by: Misi <mgyongyosi@users.noreply.github.com>	8 months ago

1 2 3 4 5 ...

288 Commits (219461a58d43b24c5351e02767ade285feb0e508)