mirror of
https://github.com/grafana/grafana.git
synced 2025-02-25 18:55:37 -06:00
47 lines
1.4 KiB
Markdown
47 lines
1.4 KiB
Markdown
|
---
|
||
|
|
aliases:
|
||
|
|
- ../../../auth/grafana-com/
|
||
|
|
description: Grafana Com Authentication
|
||
|
|
title: Configure Grafana Com authentication
|
||
|
|
weight: 500
|
||
|
|
---
|
||
|
|
|
||
|
|
# Configure Grafana Com authentication
|
||
|
|
|
||
|
|
To enable GrafanaCom as your authentication provider, you configure it to generate a client ID and a secret key.
|
||
|
|
|
||
|
|
## Create GrafanaCom OAuth keys
|
||
|
|
|
||
|
|
To use GrafanaCom authentication:
|
||
|
|
|
||
|
|
1. Log in to [GrafanaCom](https://grafana.com).
|
||
|
|
1. To create an OAuth client, locate your organization and click **OAuth Clients**.
|
||
|
|
1. Click **Add OAuth Client Application**.
|
||
|
|
1. Add the name and URL of your running Grafana instance.
|
||
|
|
1. Click **Add OAuth Client**.
|
||
|
|
1. Copy the client ID and secret key or the configuration that has been generated.
|
||
|
|
|
||
|
|
The following snippet shows an example configuration:
|
||
|
|
|
||
|
|
```ini
|
||
|
|
[auth.grafana_com]
|
||
|
|
enabled = true
|
||
|
|
allow_sign_up = true
|
||
|
|
client_id = 450bc21c10dc2194879d
|
||
|
|
client_secret = eyJ0Ijoib2F1dGgyYyIhlmlkIjoiNzUwYmMzM2MxMGRjMjE6NDh3OWQiLCJ2IjoiZmI1YzVlYmIwYzFmN2ZhYzZmNjIwOGI1NmVkYTRlNWYxMzgwM2NkMiJ9
|
||
|
|
scopes = user:email
|
||
|
|
allowed_organizations = sampleorganization
|
||
|
|
enabled = true
|
||
|
|
```
|
||
|
|
|
||
|
|
## Skip organization role sync
|
||
|
|
|
||
|
|
To prevent the sync of org roles from Grafana.com, set `skip_org_role_sync` to `true`. This is useful if you want to manage the organization roles for your users from within Grafana.
|
||
|
|
|
||
|
|
```ini
|
||
|
|
[auth.grafana_com]
|
||
|
|
# ..
|
||
|
|
# prevents the sync of org roles from Grafana.com
|
||
|
|
skip_org_role_sync = true
|
||
|
|
```
|