New Aruba Orchestrator Integration #12027
Conversation
Signed-off-by: jazzyj123 <[email protected]>
Signed-off-by: jazzyj123 <[email protected]>
Signed-off-by: jazzyj123 <[email protected]>
Signed-off-by: jazzyj123 <[email protected]>
Signed-off-by: jazzyj123 <[email protected]>
Added the Aruba Orchestrator to the integrations section of the website. Signed-off-by: jazzyj123 <[email protected]>
Added Aruba Orchestrator
Signed-off-by: jazzyj123 <[email protected]>
Signed-off-by: jazzyj123 <[email protected]>
✅ Deploy Preview for authentik-docs ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
✅ Deploy Preview for authentik-storybook canceled.
|
Added Aruba Orchestrator to the sidebar. Signed-off-by: jazzyj123 <[email protected]>
| - **Name**: Authentik | ||
| - **Username Attribute**: http://schemas.goauthentik.io/2021/02/saml/username | ||
| - **Issuer URL**: https://arubaorchestrator.company/gms/rest/authentication/saml2/consume | ||
| - **SSO Endpoint**: https://authentik.company/application/saml/sporch/sso/binding/init/ |
There was a problem hiding this comment.
sporch should be replaced with something like <slug configured earlier>
| 1. Log into the Aruba Orchestrator | ||
| 2. Create a new Remote Authentication Server under **Orchestrator** -> **Authentication** -> **Add New Server** | ||
| - **Type**: SAML | ||
| - **Name**: Authentik |
There was a problem hiding this comment.
| - **Name**: Authentik | |
| - **Name**: authentik |
authentik should be lowercased
|
|
||
| ## Verification | ||
|
|
||
| 1. Go to `https://arubaorchestrator.company` using Incognito mode. |
There was a problem hiding this comment.
I don't think it's needed to specify the usage of Incognito Mode
|
|
||
| 1. Go to `https://arubaorchestrator.company` using Incognito mode. | ||
| 2. Click **Log In Using Authentik** on the login screen. | ||
| 3. Authorize with authentik. |
There was a problem hiding this comment.
I don't think clicking a button and logging in needs two different steps
|
|
||
| ## authentik Configuration | ||
|
|
||
| Insert Service configuration |
There was a problem hiding this comment.
Thanks for the laser sharp review. I've made all the requested changes and a few more.
| sidebar_label: Aruba Orchestrator | ||
| --- | ||
|
|
||
| # Service Name |
There was a problem hiding this comment.
| # Service Name | |
| # Aruba Orchestrator |
|
Thanks so much @jazzyj123 for this contribution! I'll give it a review (looks like 4d62 already caught most things) and hopefully we can get it merged after any requested changes are made. Thanks again! |
|
Oh, also @jazzyj123 it looks like you'll need to run |
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #12027 +/- ##
==========================================
- Coverage 92.66% 92.61% -0.06%
==========================================
Files 761 761
Lines 37863 37863
==========================================
- Hits 35085 35065 -20
- Misses 2778 2798 +20
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
New Aruba Orchestrator Integration v2 Signed-off-by: jazzyj123 <[email protected]>
This comment was marked as duplicate.
This comment was marked as duplicate.
Sorry, something went wrong.
had a \ character which was failing build. Signed-off-by: jazzyj123 <[email protected]>
|
|
||
| - `arubaorchestrator.company` is the FQDN of the Aruba Orchestrator install. | ||
| - `authentik.company` is the FQDN of the authentik install. | ||
| - `ssl.certificate` is the name of the SSL certificate used to sign outgoing responses. |
There was a problem hiding this comment.
If it's an SSL certificate, it shouldn't be formatted as a domain. If I were you, I would remove this line and refer to the certificate directly in the documentation
This integration guide details how to configure authentik as a SAML identity provider for Aruba Orchestrator, allowing centralized authentication and role-based access control. It involves setting up SAML mappings in authentik and configuring Aruba Orchestrator to accept SAML assertions from authentik for user login.