Establish Connection
On Entra
Click on Enterprise Application:
Click New Application:
Click Create your own Application:
Choose a distinct name,
Select Register an application to integrate with Microsoft Entra ID (App you're developing)
Click create. Choose Supported Accounts(Mostly just first)
Click register. Go back to EnterpriseApplications andsearch for newly created Application and click it:
Click SingleSign-On and Edit Attributes & Claims:
Choose add Claim. Name the Claim DistinctUserName. Choose transformation ExtractMailPrefix()
and use Source-Attribute: user.userprincipalname.
Click add and save:
Close InWindow Attribute & Claims and choose GotoApplication:
Choose Add Redirect Uri:
Click Add a Platform and choose Web:
Add URL and save:
This entry needs to be the Complete URL to the Page Special:PluggableAuthLogin:
https://my.cool.bluespice.url/wiki/Special:PluggableAuthLogin
And it depends on the WikiLanguage, so for German:
https://my.cool.bluespice.url/wiki/Spezial:PluggableAuthLogin
after saving here you can add several more(needed for FarmInstallation .):
click save.
Go to Manifest :
and change Value for "acceptMappedClaims" to:
"acceptMappedClaims": true
Clikc Save. Go back to overview and choose Add a certificate or secret:
Choose Add Secret, name it and chose expiry date(24 Month) is max. Click Add.
The Secret has a Value and an ID. Nobody cares about the ID, please copy/save Value for later.
Go back to Overview:
Fill jsonstring with Value:
{"clientID":">>CLIENT_ID_STRING<<","clientsecret":">>SECRET_VALUE_STRING<<","preferred_username":"DistinctUserName","providerURL":"https://login.microsoftonline.com/>>TENNANT_ID_STRING<<</v2.0/"}
On Wiki
Go to
https://my.cool.bluespice.url/wiki/Special:BlueSpiceConfigManager
Wat
| Name | Value | Usage |
|---|---|---|
| Button Label | Free String | Just a Identifier for the Login Button. Usefull if you have several Authentication Providers |
| PluginName | "OpenIDConnect" | Tells BlueSpice what plugin to use |
| Data object | json-string | Tells BlueSpice the Sources of the UserInformation |
| Group object string | json-string | Tells BlueSpice about groupsync configuration |
Click Add , check the Chekbox"Should login occur automatically when a user visits the wiki?", and after that click Save.
Open Wiki in a New Browser or Private Session:
Enable Auto-Login:
Step 1: Enable AutoForwarding to LoginPage
Step2: Disable LocalLogin:
Set:
<?php
$GLOBALS['wgPluggableAuth_EnableLocalLogin'] = false;
in post-init-settings.php
See also:
