trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
This repository has been archived on 2024-05-31. You can view files and clone it, but cannot push or open issues or pull requests.
authentik/website/integrations/services/portainer/index.md
Matthieu B 89f8962a23
website/integrations: improve 'Portainer' section (#3508) 
* Cleared up confusion regarding portainer

Adding in a / at the end of the redirect url is crucial and failing to do so will cause a 'Redirect URL' error thrown in by authentik.
I also find it more clear to use 'portainer.company' instead of 'port.company'.


Signed-off-by: Matthieu B <66959271+mtthidoteu@users.noreply.github.com>

* fix lint

Signed-off-by: Matthieu B <66959271+mtthidoteu@users.noreply.github.com>
Co-authored-by: Jens L <jens@beryju.org>
2022-09-01 12:49:09 +02:00

2.1 KiB
Raw Blame History

title
Portainer

Support level: Community

What is Portainer

From https://www.portainer.io/

:::note Portainer is a powerful, GUI-based Container-as-a-Service solution that helps organizations manage and deploy cloud-native applications easily and securely. :::

:::note This is based on authentik 2021.7.3 and Portainer 2.6.x-CE. Portainer 2.6 supports OAuth without additional licenses, 1.x Series requires a paid license for OAuth. :::

Preparation

The following placeholders will be used:

  • portainer.company is the FQDN of Portainer.
  • authentik.company is the FQDN of authentik.

Step 1 - authentik

In authentik, under Providers, create an OAuth2/OpenID Provider with these settings:

:::note Only settings that have been modified from default have been listed. :::

Protocol Settings

  • Name: Portainer
  • Client ID: Copy and Save this for Later
  • Client Secret: Copy and Save this for later
  • Redirect URIs/Origins: https://portainer.company/

Step 2 - Portainer

In Portainer, under Settings, Authentication, Select OAuth and Custom

  • Client ID: Client ID from step 1
  • Client Secret: Client Secret from step 1
  • Authorization URL: https://authentik.company/application/o/authorize/
  • Access Token URL: https://authentik.company/application/o/token/
  • Redirect URL: https://portainer.company
  • Resource URL: https://authentik.company/application/o/userinfo/
  • Logout URL: https://authentik.company/application/o/portainer/end-session/
  • User Identifier: email
  • Scopes: email openid profile

:::note Portainer by default shows commas between each item in the Scopes field. Do NOT use commas. Use a space :::

Step 3 - authentik

In authentik, create an application which uses this provider. Optionally apply access restrictions to the application using policy bindings.

Notes

:::note Portainer Reference link: https://documentation.portainer.io/v2.0/auth/oauth/ :::