Question

OpenID with Authnetik

  • 14 April 2024
  • 2 replies
  • 26 views

Badge +1

Hi,

We’re trying to setup OpenID authentication using our Authentik service.

I followed the Centreon documentation but I can’t manage to make it work.

This is our Centreon conf :


This is our Authentik conf :


When I click on OpenID button, it send a request to :

https://$AUTHENTIK_FQDN/application/o/centreon/authorize?client_id=$CLIENTID&response_type=code&redirect_uri=https%3A%2F%2F$CENTREON_FQDN%2Foauth%2Fcallback%2Fcentreon%2Fauthentication%2Fproviders%2Fconfigurations%2Fopenid&state=661c20069eb46&scope=openid%20email%20profile

that fail on Authentik with a 404 code.

Any idea how to fix this ?
 


2 replies

Userlevel 6
Badge +18

Hi @MOAR , Redirect URL must be the url to be redirected from your IdP to Centreon, so Centreon URL.

You must define nothing or your Centreon URL like: https://docs.centreon.com/docs/connect/openid/#step-7-configure-your-identity-provider-idp

Badge +1

Hi @MOAR , Redirect URL must be the url to be redirected from your IdP to Centreon, so Centreon URL.

You must define nothing or your Centreon URL like: https://docs.centreon.com/docs/connect/openid/#step-7-configure-your-identity-provider-idp

Seems to be a proxy error...
When I removed the Redirect URL on Centreon, I still got an error but with this request :
 

https://$AUTHENTIK_FQDN/application/o/centreon/authorize?client_id=$CLIENT_ID&response_type=code&redirect_uri=https%3A%2F%2Flocalhost%2Fcentreon%2Fauthentication%2Fproviders%2Fconfigurations%2Fopenid&state=661ed02274594&scope=email%20openid%20profile


We’re using Teleport to access the ui.
Do we still need to put a reverse proxy on localhost and access it using Teleport ?

Reply