Introduction to Phorge and Authentication Providers
Phorge, formerly known as Phabricator, is a popular open-source platform for code review, collaboration, and bug tracking. By default, Phorge comes with no authentication providers enabled, meaning that users must register for an account through the web interface.
However, Phorge allows you to integrate with various authentication providers, making it easier for users to log in using their existing credentials from other services. In this article, we will cover how to add authentication providers for Phorge/Phabricator, providing a comprehensive guide to get you started.
Why Use Authentication Providers?
Using authentication providers offers several benefits:
- Ease of use: Users can log in using their existing credentials from other services, eliminating the need to remember yet another username and password.
- Security: Phorge can leverage the security measures already in place for the authentication provider, such as two-factor authentication or single sign-on (SSO).
- Integration: Authentication providers can be used to automatically assign users to specific groups or projects based on their credentials, streamlining the onboarding process.
Adding Authentication Providers
To add an authentication provider, navigate to the Phorge configuration page at /config/:
http://your-phorge-instance.com/config/
From the configuration page, click on the "Authentication" tab. You will see a list of currently configured authentication providers, if any. To add a new provider, click the "Add Authentication Provider" button:
Configuring LDAP Authentication
Phorge supports LDAP (Lightweight Directory Access Protocol) for integrating with directory services such as Active Directory or OpenLDAP. Here's how to configure LDAP authentication:
- Select "LDAP" as the authentication provider type.
- Enter the LDAP server hostname and port number. If your LDAP server uses a secure connection (e.g., LDAPS), select "Secure" and specify the appropriate SSL certificate.
- Provide the base DN (distinguished name) for your LDAP directory. This is typically the starting point for searching user entries.
- Specify the user search filter. This filter is used to locate a user's entry based on their username or email address.
- Configure any necessary mapping between LDAP attributes and Phorge user fields, such as mapping the user's email address or full name.
- Optionally, configure group membership synchronization. This allows Phorge to automatically assign users to groups based on their LDAP group memberships.
Configuring OAuth Authentication
Phorge supports OAuth (Open Authorization) for integrating with various web services, such as Google, GitHub, or Bitbucket. Here's how to configure OAuth authentication:
- Select "OAuth" as the authentication provider type.
- Enter a display name and a description for the OAuth provider.
- Select the OAuth version and provide the authorization and token URLs for the web service.
- Provide the client ID and client secret for your OAuth application. You can obtain these credentials by registering your application with the web service.
- Optionally, configure any necessary scopes for the OAuth application, such as access to the user's email address or public repositories.
- Authentication providers can be added to Phorge to enable users to log in using their existing credentials from other services.
- Phorge supports LDAP, OAuth, and other authentication providers.
- Configuring authentication providers involves specifying the provider type, server details, and any necessary mappings or scopes.