Merge pull request #68508 from jneczypor/OSDOCS-8378

OSDOCS-8378: Migrate "Getting Started with Rosa - Set up an IDP"

Author: EricPonvelle

_topic_maps/_topic_map_rosa.yml

@@ -131,6 +131,8 @@ Topics:
       File: cloud-experts-getting-started-detailed-cli-guide
     - Name: Hosted Control Planes guide
       File: cloud-experts-getting-started-hcp
+  - Name: Setting up an identity provider
+    File: cloud-experts-getting-started-idp
 ---
 Name: Getting started
 Dir: rosa_getting_started

cloud_experts_tutorials/cloud-experts-getting-started/cloud-experts-getting-started-idp.adoc

@@ -0,0 +1,107 @@
+:_mod-docs-content-type: ASSEMBLY
+[id="cloud-experts-getting-started-idp"]
+= Tutorial: Setting up an identity provider
+include::_attributes/attributes-openshift-dedicated.adoc[]
+:context: cloud-experts-getting-started-idp
+
+toc::[]
+
+//rosaworkshop.io content metadata
+//Brought into ROSA product docs 2023-11-28
+
+To log in to your cluster, set up an identity provider (IDP). This tutorial uses GitHub as an example IDP. See the full list of xref:../../rosa_install_access_delete_clusters/rosa-sts-config-identity-providers.adoc#understanding-idp-supported_rosa-sts-config-identity-providers[IDPs supported by ROSA].
+
+* To view all IDP options, run the following command:
++
+[source,terminal]
+----
+rosa create idp --help
+----
+
+== Setting up an IDP with GitHub
+. Log in to your GitHub account.
+. Create a new GitHub organization where you are an administrator.
++
+[TIP]
+====
+If you are already an administrator in an existing organization and you want to use that organization, skip to step 9.
+====
++
+Click the *+* icon, then click *New Organization*.
++
+image::cloud-experts-getting-started-idp-new-org.png[]
+
+. Choose the most applicable plan for your situation or click *Join for free*.
+
+. Enter an organization account name, an email, and whether it is a personal or business account. Then, click *Next*.
++
+image::cloud-experts-getting-started-idp-team.png[]
+
+. *Optional:* Add the GitHub IDs of other users to grant additional access to your ROSA cluster. You can also add them later.
+. Click *Complete Setup*.
+. *Optional:* Enter the requested information on the following page.
+. Click *Submit*.
+. Go back to the terminal and enter the following command to set up the GitHub IDP:
++
+[source,terminal]
+----
+rosa create idp --cluster=<cluster name> --interactive
+----
+
+. Enter the following values:
++
+[source,terminal]
+----
+Type of identity provider: github
+Identity Provider Name: <IDP-name>
+Restrict to members of: organizations
+GitHub organizations: <organization-account-name>
+----
+
+. The CLI will provide you with a link. Copy and paste the link into a browser and press *Enter*. This will fill the required information to register this application for OAuth. You do not need to modify any of the information.
++
+image::cloud-experts-getting-started-idp-link.png[]
+
+. Click *Register application*.
++
+image::cloud-experts-getting-started-idp-register.png[]
+
+. The next page displays a *Client ID*.  Copy the ID and paste it in the terminal where it asks for *Client ID*.
++
+[NOTE]
+====
+Do not close the tab.
+====
+
+. The CLI will ask for a *Client Secret*. Go back in your browser and click *Generate a new client secret*.
++
+image::cloud-experts-getting-started-idp-secret.png[]
+
+. A secret is generated for you. Copy your secret because it will never be visible again.
+
+. Paste your secret into the terminal and press *Enter*.
+. Leave *GitHub Enterprise Hostname* blank.
+. Select *claim*.
+. Wait approximately 1 minute for the IDP to be created and the configuration to land on your cluster.
++
+image::cloud-experts-getting-started-idp-inputs.png[]
+
+. Copy the returned link and paste it into your browser. The new IDP should be available under your chosen name. Click your IDP and use your GitHub credentials to access the cluster.
++
+image::cloud-experts-getting-started-idp-login.png[]
+
+== Granting other users access to the cluster
+To grant access to other cluster user you will need to add their GitHub user ID to the GitHub organization used for this cluster.
+
+. In GitHub, go to the *Your organizations* page.
+
+. Click your *profile icon*, then *Your organizations*. Then click *<your-organization-name>*.  In our example, it is `my-rosa-cluster`.
++
+image::cloud-experts-getting-started-idp-org.png[]
+
+. Click *Invite someone*.
++
+image::cloud-experts-getting-started-idp-invite.png[]
+
+. Enter the GitHub ID of the new user, select the correct user, and click *Invite*.
+. Once the new user accepts the invitation, they will be able to log in to the ROSA cluster using the console link and their GitHub credentials.