You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: wiki/Security-Configuration.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
# Security Configuration
2
2
3
-
This document describes the available security configuration options for the mnestix-proxy project, focusing on integration with **Keycloak** and **Azure Active Directory**.
3
+
This document describes the available security configuration options for the mnestix-proxy project, focusing on integration with **Keycloak** and **Azure Entra ID**.
4
4
5
5
## Keycloak
6
6
@@ -10,7 +10,7 @@ Keycloak is an open-source identity and access management solution. To enable Ke
10
10
Update your `appsettings.json` with the following section:
@@ -20,28 +20,28 @@ Keycloak is an open-source identity and access management solution. To enable Ke
20
20
The proxy will validate JWT tokens issued by Keycloak. Ensure your clients obtain tokens from Keycloak and include them in the `Authorization: Bearer <token>` header.
21
21
22
22
23
-
## Azure Active Directory
23
+
## Azure Entra ID
24
24
25
-
Azure AD provides cloud-based identity management. To enable Azure AD authentication:
25
+
Azure Entra ID provides cloud-based identity management. To enable Azure Entra ID authentication:
26
26
27
27
-**Configuration**:
28
28
Update your `appsettings.json` with the following section:
29
29
```json
30
30
"AzureAd": {
31
-
"EnableAzureAdAuth": "false",
31
+
"EnableAzureAdAuth": "true",
32
32
"Instance": "https://login.microsoftonline.com/",
33
33
"ClientId": "<client-id>",
34
34
"Domain": "<your-domain>",
35
35
"TenantId": "<tenant-id>"
36
36
}
37
37
```
38
38
-**Usage**:
39
-
The proxy will validate JWT tokens issued by Azure AD. Clients must authenticate with Azure AD and include the token in the `Authorization` header.
39
+
The proxy will validate JWT tokens issued by Azure Entra ID. Clients must authenticate with Azure Entra ID and include the token in the `Authorization` header.
40
40
41
41
42
42
## Additional Notes
43
43
44
-
- Both Keycloak and Azure AD configurations rely on the standard ASP.NET Core authentication middleware.
44
+
- Both Keycloak and Azure Entra ID configurations rely on the standard ASP.NET Core authentication middleware.
45
45
- Ensure the `Audience` matches your application's client ID.
46
46
- For development, you may set `RequireHttpsMetadata` to `false`, but it is recommended to use `true` in production.
0 commit comments