Flashduty Docs
中文EnglishRoadmapAPI官网控制台
中文EnglishRoadmapAPI官网控制台
  1. Platform
  • Getting Started
    • Introduction
    • Quick start
    • FAQ
    • Product Comparison
  • Incidents
    • What is an Incident
    • View Incidents
    • Handle Incidents
    • Escalations and Assignments
    • Custom Fields
    • Custom Actions
    • Alert Noise Reduction
    • Past Incidents
    • Outlier Incidents
  • Configure Flashduty
    • Channels
    • Integrate Alerts
    • Alert Noise Reduction
    • Escalation Rules
    • Label Enrichment
    • Schedules
    • Templates
    • Service Calendars
    • Preferences
    • Alert Routing
    • Silence and Inhibition
    • Filters
    • Notification Bots
    • Alert Pipeline
  • Platform
    • Teams and Members
    • Permissions
    • Single Sign-On
    • Insights
  • Advanced Features
    • Referencing Variables
    • Dynamic Assignment
  • Integrations
    • Alerts integration
      • Standard Alert Integration
      • Email Integration
      • Nightingale/FlashCat Integration
      • Prometheus Integration
      • Grafana Integration
      • Zabbix Integration
      • Uptime Kuma Integration
      • Alibaba Cloud ARMS Integration
      • Alibaba Cloud Monitor CM Event Integration
      • Alibaba Cloud Monitor CM Metrics Integration
      • Alibaba Cloud SLS Integration
      • AWS CloudWatch Integration
      • Azure Monitor Integration
      • Baidu Cloud BCM Integration
      • Huawei Cloud CES Integration
      • Influxdata Integration
      • Open Falcon Integration
      • PagerDuty Integration
      • Tencent BlueKing Integration
      • Tencent Cloud CLS Integration
      • Tencent Cloud Monitor CM Integration
      • Tencent Cloud EventBridge
      • OceanBase Integration
      • Graylog Integration
      • Skywalking Integration
      • Sentry Integration
      • Jiankongbao Integration
      • AWS EventBridge Integration
      • Dynatrace Integration
      • Huawei Cloud LTS Integration
      • GCP Integration
      • Splunk Alert Events Integration
      • AppDynamics Alert Integration
      • SolarWinds Alert Events Integration
      • Volcengine CM Alert Events Integration
      • Volcengine CM Event Center Integration
      • Volcengine TLS Integration
      • OpManager Integration
      • Meraki Integration
      • Keep Integration
      • ElastAlert2 Alert Integration
      • StateCloud Alert Events
      • Guance Alert Events
      • Zilliz Alert Events
      • Huawei Cloud APM Alerts
      • zstack integration
    • Change integration
      • Standard Change Event
      • Jira Issue Events
    • IM integration
      • Feishu (Lark) Integration Guide
      • Dingtalk Integration
      • WeCom Integration
      • Slack Integration
      • Microsoft Teams Integration
    • Single Sign-On
      • Authing Integration
      • Keycloak Guide
      • OpenLDAP Guide
    • Webhooks
      • Alert webhook
      • Incident webhook
      • Costom action
  • Terms
    • Terms of Service
    • User Agreement/Privary Policy
    • SLA
    • Data Security
  1. Platform

Single Sign-On

FlashDuty currently supports Single Sign-On (SSO) integration through SAML2.0, OIDC, CAS, and LDAP (private deployment only) protocols, enabling seamless integration with various applications and platforms. These features help you quickly implement identity information sharing with other platforms. Users only need to log in once to access multiple related applications and services without authenticating separately for each application, improving work efficiency, user experience, simplifying the login process, and enhancing security.

Configure SAML Protocol#

Configuration path: Access Control => Single Sign-On => Enable => Settings => Select SAML2.0 Protocol
FieldDescription
Protocol TypeSelect SAML2.0
Metadata DocumentXML document obtained from the identity provider
Field MappingFlashDuty extracts user email, username, and phone information from the identity provider through mapped fields
Login DomainEssential identifier for authentication, globally unique
Create Account on LoginEnabled by default, if disabled, members need to be invited before they can log in
Flashcat Service Provider InformationService Provider Metadata:
Assertion Consumer Service URL: Assertion endpoint for single Sign-On with identity provider

Configure OIDC Protocol#

Configuration path: Access Control => Single Sign-On => Enable => Settings => Select OIDC Protocol
FieldDescription
Protocol TypeSelect OIDC Protocol
IssuerObtain Issuer from identity provider, case-sensitive URL without query parameters
Client IDClient ID obtained from identity provider
Client SecretClient secret obtained from identity provider
Field MappingFlashDuty extracts user email, username, and phone information from the identity provider through mapped fields
Login DomainEssential identifier for authentication, globally unique
Create Account on LoginEnabled by default, if disabled, members need to be invited before they can log in
Flashcat Service Provider InformationRedirect URL: Callback address for identity provider to Flashduty
Supported Signing Algorithms: RS256,RS384,RS512,ES256,ES384,ES512,PS256,PS384,PS512 (HS256 not supported)
Request scope: openid, email, phone

Configure CAS Protocol#

Configuration path: Access Control => Single Sign-On => Enable => Settings => Select CAS Protocol
FieldDescription
Protocol TypeSelect CAS Protocol
CAS AddressCAS service address from identity provider
CAS Login PathCAS login path
Field MappingFlashDuty extracts user email, username, and phone information from the identity provider through mapped fields
Login DomainEssential identifier for authentication, globally unique
Create Account on LoginEnabled by default, if disabled, members need to be invited before they can log in
Flashcat Service Provider InformationRedirect URL: Callback address for identity provider to Flashduty

Configure LDAP Protocol#

提示
LDAP single Sign-On is only supported in private deployment version
Configuration path: Access Control => Single Sign-On => Enable => Settings => Select LDAP Protocol
FieldDescription
Protocol TypeSelect LDAP Protocol
LDAP URLLDAP service address, e.g., ldap://10.10.10.10:389
BIND DNUsername for LDAP connection, used for testing connection and searching users or groups. E.g., cn=admin,dc=flashduty,dc=com
BIND DN PasswordPassword for LDAP connection, will be encrypted in database
TLSSkip Verify for TLS login
StartTLSWhether to enable StartTLS
User DNDefines the directory to start user search, e.g., ou=people,dc=flashduty,dc=com
Authentication FilterCombined with Bind DN and password for user lookup, used to retrieve user DN information for LDAP authentication. Supports custom filter expressions, basic format: (&(mail=%s)). Note: Starting and ending parentheses are required
Field MappingFlashDuty extracts user email, username, and phone information from the identity provider through mapped fields. Email is a required mapping field
Login DomainEssential identifier for authentication, globally unique
Create Account on LoginEnabled by default, if disabled, members need to be invited before they can log in
提示
Field mapping must be consistent with identity provider configuration to avoid errors. Fill in values according to descriptions. Refer to OpenLDAP Integration Guide for configuration. Contact FlashDuty customer service if you have questions.

Best Practices#

Configure FlashDuty SSO through Authing Configuration.
Configure FlashDuty SSO through Keycloak Configuration.
Configure FlashDuty SSO through Ldap Configuration.

FAQ#

What is SSO?
Single Sign-On (SSO) is an enterprise system integration solution that unifies user authentication, allowing users to access all trusted enterprise applications with a single login.
What are SAML2.0 protocol features?
SAML 2.0 protocol is XML-based, implementing cross-domain single Sign-On and authentication through secure, standardized assertions, supporting multiple data exchange bindings for interoperability and flexibility.
What are OIDC protocol features?
OIDC protocol, based on OAuth 2.0, provides standardized, secure authentication flows using JSON Web Tokens for user information transfer, enabling cross-platform single Sign-On and identity management.
What are CAS protocol features?
CAS protocol is a web application single Sign-On protocol that enables users to authenticate once across multiple services using Service Tickets and Authentication Tickets for service authentication.
What are LDAP protocol features?
LDAP protocol, derived from X.500 standard, organizes data in a tree structure for hierarchical management and quick retrieval, providing flexible query language (LDAP Search Filter) for complex data filtering and searching.
Can multiple protocols be used simultaneously?
Currently not supported, only one protocol can be selected
修改于 2024-11-25 02:56:20
上一页
Permissions
下一页
Insights
Built with