Details
-
Type:
New Feature
-
Status:
Closed
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 2.11
-
Fix Version/s: 3.1
-
Component/s: Authentication & Authorization
-
Labels:None
-
Number of attachments :
Description
The setup of our CI environment has 3 tools included: Jenkins/Hudson, Artifactory/Nexus, and Sonar.
We have setup an Apache Proxy in front of those three tools in order to be able to migrate them to other VM servers in order to scale when the number of projects/jobs rises.
Unfortunately you need to login to each of the 3 tools separately and often the browser gets confused so that you need to type your username/password at each tool, each time you want to access it.
The idea is now to use the Apache Proxy for doing the authentication and to pass the Apache authentication token to each of these tools in order to skip the tool built-in authentication step.
This kind of setup is possible with:
- Jenkins/Hudson - https://wiki.jenkins-ci.org/display/JENKINS/Reverse+Proxy+Auth+Plugin
- Artifactory/Nexus - https://docs.sonatype.com/display/SPRTNXOSS/URL+Realm
The one that is missing in this list is Sonar.
Issue Links
- is depended upon by
-
SONARPLUGINS-1803
Support OpenID to log in to Sonar
-
-
SONARPLUGINS-694
Enable SSO capability
-
This is a minor side effect but when we try to delete a user created through the SSO mechanism we get an error message saying :