29 lines
1.5 KiB
Markdown
29 lines
1.5 KiB
Markdown
## Example Config：
|
||
|
||
```yaml
|
||
Oauth2:
|
||
Admin: 701b9ea6-9f56-48cd-af3e-cbb4bfc1475c
|
||
ClientID: 3516291f53eca9b4901a01337e41be7dc52f565c8657d08a3fddb2178d13c5bf
|
||
ClientSecret: 0568b67c7b6d0ed51c663e2fe935683007c28f947a27b7bd47a5ad3d8b56fb67
|
||
Endpoint: "https://akkia.cloudflareaccess.com"
|
||
Type: cloudflare
|
||
```
|
||
|
||
## Config Detail：
|
||
|
||
| Name | How to Obtain |
|
||
|-----------------------|-----------------------------------------------------------------------------|
|
||
| Admin | `My Team` -> `Users` -> `<Specific User>` -> `User ID` |
|
||
| ClientID/ClientSecret | `Access` -> `Application` -> `Add an Application` <br/> -> `SaaS` -> `OIDC` |
|
||
| Endpoint | `Access` -> `Application` -> `Application URL` -> `Only Schema&Domain part` |
|
||
|
||
### Create SaaS-OIDC application
|
||
|
||
Zero Trust Dashboard: https://one.dash.cloudflare.com
|
||
|
||
1. `Access` -> `Application` -> `Add an Application`;
|
||
2. Select `SaaS`, Input your custom application name in `Application` field，select `OIDC` and click `Add application`;
|
||
3. Select `openid`, `email`, `profile`, `groups` in `Scopes` field;
|
||
4. Input your CallBack URL in `Redirect URLs` field (e.g. `https://monitor.example.com/oauth2/callback`);
|
||
5. Record `Client ID`, `Client Secret` and Schemas&Domain part in `Issuer` (e.g. `https://akkia.cloudflareaccess.com`);
|
||
6. Modify Dashboard Config ( location: `/opt/nezha/dashboard/data/config.yaml`), and restart Dashboard service; |