226 Commits (219461a58d43b24c5351e02767ade285feb0e508)

Author	SHA1	Message	Date
Mykhailo Zahlada	fc988c8771	Auth: Add Azure/Entra workload identity support (#104807) ... * fixes/adds azure workload identity authentication. Issue #78249 * Updates default values. Adds `workload_identity_token_file` defaults * Updates example config. Adds `workload_identity_token_file` * Updates docummentation: adds Federated credentials for Workload Identity * Update docs/sources/setup-grafana/configure-security/configure-authentication/azuread/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-security/configure-authentication/azuread/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Docs: add link to official documentation. Clarifies example. * 1. Add workload_identity_enabled and workload_identity_token_file settings to [auth.azuread] for workload identity support. 2. Extend OAuthInfo struct to include workload identity fields. 3. Update OAuth authentication logic to handle Azure AD workload identity using federated token as client assertion. 4. Update sample configuration and documentation for new settings. * ensure environment variable overrides are respected for OAuth SSO settings - Ensure that settings loaded in pkg/services/ssosettings/strategies/oauth_strategy.go correctly reflect environment variable overrides, matching Grafana's config behavior. - Align config loading logic with main config loader to prevent issues where INI values would override environment variables. * updates documentation * test: add workload identity configuration tests for Azure AD OAuth strategy. Add test coverage for workload_identity_enabled and workload_identity_token_file settings * feat: add workload identity support to Azure AD SSO configuration UI * updates documentation * Simplify OAuth flow by removing unnecessary switch-case structure * Small changes * Lint + i18n gen * refactor: remove redundant workload_identity_enabled setting as auth method gets defined by client_authentication * update documentation * refactor: remove redundant workload_identity_enabled setting as auth method gets defined by client_authentication * updates documentation - configuration options table: adds `client_authentication`, `workload_identity_token_file`, and `federated_credential_audience` * Small changes, lint, i18n --------- Co-authored-by: Misi <mgyongyosi@users.noreply.github.com>	1 month ago
song2park	e572af4562	docs: fix keycloak signout_redirect_url (#106191)	1 month ago
Jacob Hands	8734b54f90	Docs: document required return type for org_attribute_path (#105946) ... Co-authored-by: linoman <2051016+linoman@users.noreply.github.com> Co-authored-by: Irene Rodríguez <irene.rodriguez@grafana.com>	1 month ago
Jack Baldry	39e7804557	Add comments explaining what pages the aliases redirect and fix broken aliases (#105408)	2 months ago
colin-stuart	d05b2862b6	SCIM: update docs with externalId field & correct endpoint (#105026) ... * SCIM: update docs with externalId field * better phrasing * vale warning fix * explain where mapping is configured * clarify assertion_attribute_login * better phrasing * even better explanation * remove confusing step * remove confusing line * linter fixes * improve Integrating with SCIM Provisioning section * bigger warning about scim/saml unique identifier mismatch * lint * vale fixes * Add Integrating with SCIM Provisioning part --------- Co-authored-by: Vardan Torosyan <vardants@gmail.com>	2 months ago
Vardan Torosyan	08d7e75b5c	Docs: SAML docs refactoring (#103450) ... * Docs: SAML docs refactoring * Cleanup the root page * Update the root file * Refactor Azure AD guide * Change the order of the tree * Remove the index file again, back from main * SAML UI page review and editing * Review and edit SAML config options page * SAML signing and encryption edit/review * Remaining pages and aliases * Fix PR comments * More fixes * Update _index.md * Update _index.md * Update _index.md * Apply suggestions from code review Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Handle PR comments --------- Co-authored-by: Misi <mgyongyosi@users.noreply.github.com>	2 months ago
Jacob Valdez	8dfb0874a0	Docs: removing docs debt in install docs (#101750) ... * Docs: removing docs debt in install docs * cleaning up set up docs debt * fixing some vale errors * fixing broken admonition shortcode * fixing broken shortcode * fixing broken shortcode * working to the grafana authentication config * updating some more files * editing down to ldap in the repo * editing ldap doc except final section with link needed * Finishing doc debt cleanup through configure authetication * fixing shortcodes reverted by merge conflict fix * fixing admonition * fixing more broken shortcodes * adjusting some wordings ot make vale happy * updating feature toggle info	3 months ago
Eric Leijonmarck	180f579f18	Revert "Anonymous: Enforce org role Viewer setting (#102070)" (#103043) ... This reverts commit e216c2f29d.	3 months ago
Vardan Torosyan	73e0db452b	Docs: Add a section to clarify how sessions are handled with SSO (#102694) ... * Docs: Add a section to clarify how sessions are handled with SSO * Add a link to SAML SLO setup	3 months ago
Eric Leijonmarck	e216c2f29d	Anonymous: Enforce org role Viewer setting (#102070) ... * Anon: Remove org role setting * remove from ini * remove setting from documentation	3 months ago
Ieva	8af271187c	Docs: Remove references to group sync (#102599) ... * remove references to group sync * remove relfref and add new link * remove relfref * Update relfref * remove relrefs and add admonitions * fix URL * remove relrefs * replace relrefs * replace relrefs * replace relrefs * replace relrefs * replace relrefs * replace relrefs * replace relrefs * replace relrefs * run prettier --------- Co-authored-by: Irene Rodríguez <irene.rodriguez@grafana.com>	3 months ago
Misi	874751d9da	Docs: AzureAD + SAML improvements (#102623) ... * Docs: AzureAD + SAML improvements * Fix	3 months ago
Quentin Bisson	aeca9a80a4	JWT: Add org role mapping support to the JWT provider (#101584) ... * add org role mapping to the jwt provider * Fix indentation for OrgMapping assignment * add-test * fix linting * add org_attribute_path * fix test * update doc * update doc * Update pkg/services/authn/clients/jwt.go * Update docs --------- Co-authored-by: Mihaly Gyongyosi <mgyongyosi@users.noreply.github.com>	3 months ago
linoman	afb058c40a	Fix URL rendering typo (#102346) ... * Fix URL rendering typo * run prettier --------- Co-authored-by: Irene Rodriguez <irene.rodriguez@grafana.com>	3 months ago
Beverly Buchanan	cf60c4e77f	Update SAML configuration steps (#101663) ... * replace relrefs and minor edits * add new content and links * Update docs/sources/setup-grafana/configure-security/configure-authentication/saml/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-security/configure-authentication/saml/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * changes from linter and content suggestions * Update docs/sources/setup-grafana/configure-security/configure-authentication/saml/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-security/configure-authentication/saml/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-security/configure-authentication/saml/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-security/configure-authentication/saml/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * run prettier --------- Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> Co-authored-by: Irene Rodriguez <irene.rodriguez@grafana.com>	4 months ago
Robby Milo	13cf67de53	Remove relref shortcodes (#101694) ... * manually replce all shared relrefs * relref replace - grafana next * Merge branch 'master' into robbymilo/relref-replace-grafana-next * manual fixes * remove ref shortcode * Merge branch 'master' into robbymilo/relref-replace-grafana-next * prettier * fix test * update readme	4 months ago
Vardan Torosyan	801ffea206	Docs: Passwordless auth is not available in cloud (#100825) ... * Docs: Passwordless auth is not available in cloud * Update index.md --------- Co-authored-by: Irene Rodríguez <irene.rodriguez@grafana.com>	4 months ago
Ariana	d81c4b3c42	Docs: Updating SAML UI Docs for Azure specific attributes (#100565) ... * Updating SAML for Azure specific attribute structures Adding additional context surrounding SAML via Azure where the full attribute URL needs to be specified or it will not map correctly. This generates a lot of support contacts and isn't documented causing friction when organizations can't set it up themselves or lack the technical staff to self manage. * run prettier --------- Co-authored-by: Irene Rodriguez <irene.rodriguez@grafana.com>	5 months ago
colin-stuart	d58dec7951	Docs: Add docs for Passwordless Authentication Using Magic Links (#96877) ... * Docs: Add docs for Passwordless Authentication Using Magic Links * Update docs/sources/setup-grafana/configure-security/configure-authentication/passwordless/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-security/configure-authentication/passwordless/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-security/configure-authentication/passwordless/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * match Writer's Toolkit style * Update docs/sources/setup-grafana/configure-security/configure-authentication/passwordless/index.md Co-authored-by: Jack Baldry <jack.baldry@grafana.com> --------- Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> Co-authored-by: Jack Baldry <jack.baldry@grafana.com>	5 months ago
Misi	9df20eda77	Docs: Update SAML docs (#98809) ... * Update feature toggle name in SAML docs * Update SAML docs	6 months ago
John Naizer	79d565f285	OAuth: Support client_secret_jwt for oauth providers when doing token exchange (#95455) ... * added backend support for client_secret_jwt * added backend support for client_secret_jwt * added all logic to the exchange function (overloaded social exchange in azuread_oauth to handle managed identity client id) * ran yarn install to update lock file * added support for client_secret_jwt when managed_identity_client_id is null * added audience flag and changed exchange to directly access oauth config using .info * added logic in setting oauth.Config for supported client authentication values * added client_authentication, managed_identity_client_id, and audience to sample.ini file * using provided ctx in ManagedIdentityCallback function * added frontend support for federated identity credential auth * added client authentication field * added Azure AD documentation for Grafana * added bold font to "Add" keyword in documentation * minor wording change relating to previous commit * addressed changing audience to federated_credential_audience, moving validation, and changing managedIdentityCallback to private function * correction to audience name changing * fixed orgMappingClientAuthentication function name, and added in logic into validateFederatedCredentialAudience function * Change docs * Add iam team as owner of azcore pkg * added backend support for client_secret_jwt * added all logic to the exchange function (overloaded social exchange in azuread_oauth to handle managed identity client id) * ran yarn install to update lock file * added support for client_secret_jwt when managed_identity_client_id is null * added audience flag and changed exchange to directly access oauth config using .info * added logic in setting oauth.Config for supported client authentication values * added client_authentication, managed_identity_client_id, and audience to sample.ini file * using provided ctx in ManagedIdentityCallback function * added frontend support for federated identity credential auth * added client authentication field * added Azure AD documentation for Grafana * added bold font to "Add" keyword in documentation * minor wording change relating to previous commit * addressed changing audience to federated_credential_audience, moving validation, and changing managedIdentityCallback to private function * correction to audience name changing * fixed orgMappingClientAuthentication function name, and added in logic into validateFederatedCredentialAudience function * Change docs * Add iam team as owner of azcore pkg * updated yarn lock file * updated doc for correction * removed wrong changes in pkg directory * removed newline in dashboard-generate.yaml and unified.ts * updated yarn.lock to match upstream * Lint Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * removing unwanted changes * added back removed newline * fixed failing test in azuread_oauth_test.go * Update azuread_oauth.go removed unnecessary newline, fixed lint --------- Signed-off-by: Jack Baldry <jack.baldry@grafana.com> Co-authored-by: Mihaly Gyongyosi <mgyongyosi@users.noreply.github.com> Co-authored-by: Jack Baldry <jack.baldry@grafana.com>	6 months ago
Misi	123c860293	Docs: Configure SAML SLO properly with NameID and SessionIndex support (#98207) ... * Docs: SAML proper NameID and SessionIndex support * Address feedback * update link	6 months ago
Misi	5ecc3343db	Docs: Add org role mapping improvements to SAML docs (#98178) ... Docs: Add org role mapping improvements	6 months ago
bo0tzz	9aa23dd73f	Docs: Remove bad `info.` from generic-oauth JMESPaths (#94592) ... * Remove bad `info.` from generic-oauth JMESPaths * fix: remove nesting from example payloads * Lint --------- Co-authored-by: Mihaly Gyongyosi <mgyongyosi@users.noreply.github.com>	6 months ago
Vardan Torosyan	63d3cf93fe	Docs: Clarify when force_use_graph_api is required for Azure (#97844)	7 months ago
Vardan Torosyan	2182f4829e	Docs: Refer to the org header usage in JWT docs (#96549)	7 months ago
Eric Leijonmarck	2bab11e20a	Anonymous Devices: Add Before you begin section in docs (#97043) ... * add before you begin * Update docs/sources/setup-grafana/configure-security/configure-authentication/anonymous-auth/index.md	7 months ago
Ieva	2ffb7344e8	GAS: update auth provider docs (#96097) ... * add docs describing what GAS is and how it can be configured * auth provider docs for GAS * PR feedback	7 months ago
xavi	d9395f2682	Update JWT docs (#96623)	7 months ago
Misi	7d10ffff1b	Docs: Clarify MFA/2FA in the docs (#96610) ... * Docs: Clarify MFA/2FA in the docs * Update docs/sources/setup-grafana/configure-security/configure-authentication/_index.md Co-authored-by: Vardan Torosyan <vardants@gmail.com> --------- Co-authored-by: Vardan Torosyan <vardants@gmail.com>	7 months ago
colin-stuart	f9ac3301d3	Docs: add note that support for Auth0 "audience" feature is not available (#96507) ... * add note that support for Auth0 audience feature is not available * Update docs/sources/setup-grafana/configure-security/configure-authentication/generic-oauth/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> --------- Co-authored-by: Misi <mgyongyosi@users.noreply.github.com>	8 months ago
Mihai Doarna	7d25e9ce86	docs: Add docs on generating SAML cert from the UI (#96538) ... * add docs on generating SAML cert from the UI * run prettier	8 months ago
Vardan Torosyan	97103a5256	Docs: Clarify disabling auto login for SAML and OAuth (#96520)	8 months ago
Vardan Torosyan	26b596d351	Docs: Adding a note about how to parse JMESPath expression with a colon (#96237) ... * Docs: Adding a note about how to parse JMESPath expression with a colon --------- Co-authored-by: Irene Rodríguez <irene.rodriguez@grafana.com>	8 months ago
Mihai Doarna	c276bd1ccc	docs: Add docs on configuring role mapping for multiple GitHub teams (#96483) ... add docs on configuring role mapping for multiple GitHub teams	8 months ago
Misi	9233ad6462	Docs: Update GitLab, GitHub, Okta, Generic OAuth docs (#96386) ... * GitHub docs changes * Bunch of updates * More updates	8 months ago
Vardan Torosyan	82fdd4f03f	Docs: Clean up basic auth, anonymous access and main pages for auth configuration (#96259) ... * Docs: Clean up basic auth, anonymous access and main pages for auth configuration * Fix the typo * Prettier should fix this * fix minor typo * Update docs/sources/setup-grafana/configure-security/configure-authentication/_index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> --------- Co-authored-by: Irene Rodríguez <irene.rodriguez@grafana.com> Co-authored-by: Misi <mgyongyosi@users.noreply.github.com>	8 months ago
Misi	092b2ef5d2	Docs: Improve Google OAuth docs (#96377) ... * Add Configuration options to the bottom, align the setup with Cloud docs * Fixes, format changes * Update docs/sources/setup-grafana/configure-security/configure-authentication/google/index.md Co-authored-by: xavi <114113189+volcanonoodle@users.noreply.github.com> * fix --------- Co-authored-by: xavi <114113189+volcanonoodle@users.noreply.github.com>	8 months ago
Misi	f5bd4d078b	Docs: Extend SAML docs (improvements, assertion mapping) (#96367) ... * Move the configuration options to the bottom and extend it * Improve assertion mapping docs for Okta * fix typo * Update index.md --------- Co-authored-by: Irene Rodríguez <irene.rodriguez@grafana.com>	8 months ago
Misi	a2c998ba1d	Docs: Azure AD/ Entra ID docs improvements (#96225) ... * Add Configuration options to Azure/Entra docs * Update docs/sources/setup-grafana/configure-security/configure-authentication/azuread/index.md Co-authored-by: Vardan Torosyan <vardants@gmail.com> * Address feedback * Address other feedback * Fix link --------- Co-authored-by: Vardan Torosyan <vardants@gmail.com>	8 months ago
Vardan Torosyan	7eb4b974e0	Docs: Better explanation for enabling lookup and a small fix on okta role mapping (#96232) ... * Docs: Better explanation for enabling lookup and a small fix on okta role mapping * Run prettier	8 months ago
Misi	1dcce86cce	Docs: Update Okta docs (#96216) ... * Update Okta docs * fix typo * fix typo --------- Co-authored-by: Irene Rodríguez <irene.rodriguez@grafana.com>	8 months ago
Jacob Valdez	acebe9bee5	Docs: adding SAML name parameter configuration info (#95575)	8 months ago
Jay	39d53e65a7	Update _index.md (#95461) ... Co-authored-by: Irene Rodríguez <irene.rodriguez@grafana.com>	8 months ago
Jacob Valdez	0c73403e00	Docs: initial pruning of outdated versioning info (#95212) ... * initial pruning of outdated versioning info * removing erroneous file	8 months ago
Robby Milo	c6eeb2d845	remove unnecessary version notices (#94839)	8 months ago
linoman	f18b3ca340	SAML: Add a screenshot for Graph API integration config (#94494) ... * Add a screenshot for Graph API config	9 months ago
Misi	153036be2e	Docs: Add docs for configuring kc_idp_hint (#94226) ... Add docs for configuring kc_idp_hint	9 months ago
linoman	e37b43117b	SSO LDAP: Implement documentation (#94215) ... * Add documentation for LDAP UI * Add hyphen to string * Polish writing --------- Co-authored-by: Irene Rodriguez <irene.rodriguez@grafana.com>	9 months ago
David Garcia	dd8c50ec12	FIX: typo in generic oauth org mapping json (#94117)	9 months ago