Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 28 additions & 1 deletion website/integrations/documentation/glpi/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -51,7 +51,33 @@ By default, GLPI only offers OAuth authentication to subscribers. This guide des

## authentik configuration

To support the integration of GLPI with authentik, you need to create an application/provider pair in authentik.
To support the integration of GLPI with authentik, you need to create property mappings, and an application/provider pair in authentik.

### Create property mappings in authentik

1. Log in to authentik as an administrator and open the authentik Admin interface.
2. Navigate to **Customization** > **Property Mappings**, click **Create**, select **SAML Provider Property Mappings**, and click **Next**.
3. Configure the first mapping for the user's _given name_ (first name):
- **Name**: `givenname`
- **SAML Attribute Name**: `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname`
- **Friendly Name**: Leave blank
- **Expression**:

```python
return request.user.name.split(" ", 1)[0]
```

4. Click **Finish** to save. Then, repeat the process to create a mapping for the user's _surname_:
- **Name**: `surname`
- **SAML Attribute Name**: `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname`
- **Friendly Name**: Leave blank
- **Expression**:

```python
return request.user.name.split(" ", 1)[-1]
```

5. Click **Finish**.

### Create an application and provider in authentik

Expand All @@ -66,6 +92,7 @@ To support the integration of GLPI with authentik, you need to create an applica
- Under **Advanced protocol settings**:
- Select any available **Signing Certificate** and enable **Sign assertions**.
- Set **NameID Property Mapping** to `authentik default SAML Mapping: Email`.
- Under **Property mappings**, add the two property mappings that you created in the previous section: `givenname` and `surname`.
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
- Under **Property mappings**, add the two property mappings that you created in the previous section: `givenname` and `surname`.
- Under **Property mappings**, add the two property mappings that you created in the previous section.

- **Configure Bindings** _(optional)_: you can create a [binding](/docs/add-secure-apps/bindings-overview/) (policy, group, or user) to manage the listing and access to applications on a user's **My applications** page.

3. Click **Submit** to save the new application and provider.
Expand Down
Loading