Configuring single sign-on (AEN 4.1.3)

AEN’s single sign-on (SSO) capability creates a new authentication provider that defers to your Anaconda Repository for login and authentication cookies.

To enable SSO:

1. Deploy AEN and Repository on the same machine.

2. In the /opt/wakari/wakari-server/etc/wakari/config.json file, add:

   {
   EXISTING_CONFIGURATION,
   "SECRET_KEY": "<repo signing secret>",
   "REPO_LOGIN_URL":
      "http://example_repo.com:8080/account/login?next=http://example_repo.com/"
   }
   

3. Copy the SECRET_KEY from the Repository configuration file.

4. In the /opt/wakari/wakari-server/etc/wakari/wk-server-config.json file, modify:

   {
   EXISTING_CONFIGURATION,
   "accounts": "wk_server.plugins.accounts.repo",
   }
   

5. To activate the changes restart wakari-server:

   sudo service wakari-server restart
   

SSO is enabled.