Files
mattermost/build/docker/keycloak
Jesús Espino e980dd7bd3 Configurable dev environment (#14869)
* Configurable dev environment

* Add a bit of documentation

* fixing gofmt

* A bit more doc

* Using  variable

* Adding license header

* Moving LDAP_DATA variable to the default-config.mk file

* Adding another docker-compose for the makefile to not brake anybody workflow

* Moving dejavu to the config

* Fixing docker-compose.makefile.yaml for dejavu

* Adding keycloak support to the dev environment

* Address PR review comments

* Removing minio from default docker images

* Changing the default version of mysql to the oldest supported (5.6)

* Change the restart option to no for the dev environment

* Fixing restart option

* Reverting unneded changes

* Restoring 5.7 to check if test passes

* Going back to 5.6 mysql image

* Fixing tests on mysql 5.6

* Skipping flaky test

Co-authored-by: Mattermod <mattermod@users.noreply.github.com>
2020-07-13 22:29:39 +02:00
..

To use this keycloak image, we suggest you to use this configuration settings:

  • Enable Login With SAML 2.0: true
  • Enable Synchronizing SAML Accounts With AD/LDAP: true
  • Override SAML bind data with AD/LDAP information: false
  • Identity Provider Metadata URL: empty string
  • SAML SSO URL: http://localhost:8484/auth/realms/mattermost/protocol/saml
  • Identity Provider Issuer URL: http://localhost:8065/login/sso/SAML
  • Identity Provider Public Certificate: The file keycloak_cert.pem in this same directory
  • Verify Signature: true
  • Service Provider Login URL: http://localhost:8065/login/sso/saml
  • Enable Encryption: false
  • Sign Request: false
  • Email Attribute: email
  • Username Attribute: username
  • Id Attribute: id
  • First Name Attribute: firstName
  • Last Name Attribute: lastName

or overwrite your SamleSettings section with this settings in your config.json file (if you are not using database configuration) and restart the server:

    "SamlSettings": {
        "Enable": true,
        "EnableSyncWithLdap": true,
        "EnableSyncWithLdapIncludeAuth": false,
        "Verify": true,
        "Encrypt": false,
        "SignRequest": false,
        "IdpUrl": "http://localhost:8484/auth/realms/mattermost/protocol/saml",
        "IdpDescriptorUrl": "http://localhost:8065/login/sso/saml",
        "IdpMetadataUrl": "",
        "AssertionConsumerServiceURL": "http://localhost:8065/login/sso/saml",
        "SignatureAlgorithm": "RSAwithSHA1",
        "CanonicalAlgorithm": "Canonical1.0",
        "ScopingIDPProviderId": "",
        "ScopingIDPName": "",
        "IdpCertificateFile": "saml-idp.crt",
        "PublicCertificateFile": "",
        "PrivateKeyFile": "",
        "IdAttribute": "id",
        "GuestAttribute": "",
        "EnableAdminAttribute": false,
        "AdminAttribute": "",
        "FirstNameAttribute": "firstName",
        "LastNameAttribute": "lastName",
        "EmailAttribute": "email",
        "UsernameAttribute": "username",
        "NicknameAttribute": "",
        "LocaleAttribute": "",
        "PositionAttribute": "",
        "LoginButtonText": "SAML",
        "LoginButtonColor": "#34a28b",
        "LoginButtonBorderColor": "#2389D7",
        "LoginButtonTextColor": "#ffffff"
    },