Authentication

From QualityBox Wiki
Jump to navigation Jump to search

What options exist for authentication into QualityBox? Virtually any authentication system supported by Apache. So, whether your organization runs a Kerberos authentication system, LDAP, or other, it's probably supported. MediaWiki has the new abstract Pluggable Auth extension, which is in turn extended by other extensions like Pluggable SSO that can take any system that sets `remote_user` (whereas previously you would use https://www.mediawiki.org/wiki/Extension:Auth_remoteuser). What's more, the OpenID Connect extension extends Pluggable Auth to use any OpenID Connect provider such as Google or Microsoft Azure Active Directory Federation Services (ADFS) -- basically Active Directory. The SimpleSAML extension makes MediaWiki accessible to any SAML 2.0 Service Provider (SP) and Identity Provider (IdP) (and also supports some other identity protocols and frameworks, such as Shibboleth 1.3, A-Select, CAS, OpenID, WS-Federation or OAuth).

Keep in mind, that the built-in user management is all you need if you don't have any fancy enterprise authentication and authorization framework in place.