No description
- Python 100%
Both group sync mappings now map Entra groups via the group attribute entra_group, as configured on auth.sek2-be.ch (2026-10-22): Option A adds the user directly to the matching groups, Option B translates the Entra name before the source links the group by name. Step 8 and the Entra guide no longer require identical group names. Option A in the repo resolves the user via the source connection instead of the e-mail address; not yet applied on the server. Adds the remaining custom mappings (username, Matrix profile, OpenCloud roles, email_verified) and a README with their assignment per source. Signed-off-by: Simon Bärlocher <simon@whatwedo.ch> |
||
|---|---|---|
| authentik | ||
| contributing | ||
| infrastructure | ||
| keycloak | ||
| ms-entra | ||
| troubleshooting | ||
| .gitignore | ||
| README.md | ||
📚 Documentation Repository
This repository contains documentation, guides, and reference material.
📖 Available Documentation
-
Contribution guidelines
Documentation and guides related to infrastructure configuration and best practices.- Git
Guidelines for contributing using git
- Git
-
Authentik Documentation and guides related to Authentik configuration and best practices.
- Add MS Entra as login source in Authentik
Step-by-step instructions for connecting a partner organisation's MS Entra tenant as login source, including
sek2be*group sync.
- Add MS Entra as login source in Authentik
Step-by-step instructions for connecting a partner organisation's MS Entra tenant as login source, including
-
Infrastructure
Documentation and guides related to infrastructure configuration and best practices. -
Keycloak
Documentation and guides related to Keycloak configuration and best practices.- Enforce OTP 2FA for Internal Users
Step-by-step instructions for enforcing OTP-based two-factor authentication for internal users, while excluding external Microsoft Entra users. - Integrate MS Entra in Keycloak as IDP Step-by-step instructions for integrating MS Entra as identity-provider.
- Enforce OTP 2FA for Internal Users
-
Microsoft Entra Documentation and guides related to Microsft Entra configuration and best practices.
- Enterprise App Integration with Keycloak Step-by-step instructions for creating an Enterprise Application in Microsoft Entra (Azure AD) as an identity provider for Keycloak.
- Enterprise App Integration with Authentik Step-by-step instructions for creating an Enterprise Application in Microsoft Entra (Azure AD) as login source for Authentik.
-
Troubleshooting Encountered & solved problems.
- Nextcloud File Locking Preventing sync conflicts when multiple users edit the same file via the Nextcloud desktop client.