Jenkins (OIDC)

Step 1: Deploy Hanzo IAM and Jenkins

Feedback
Set the Jenkins URL (Manage Jenkins -> Configure System -> Jenkins Location) to JENKINS_HOSTNAME.
Feedback
Ensure that Hanzo IAM can be logged in and used normally.
Feedback
Set Hanzo IAM's origin value (conf/app.conf) to IAM_HOSTNAME.

Step 2: Configure the Hanzo IAM application

Feedback
Create or edit a Hanzo IAM application.
Feedback
Add redirect URL: http://JENKINS_HOSTNAME/securityRealm/finishLogin.
Feedback
Add providers as needed. Note the Client ID and Client secret from the application page.

Step 3: Configure Jenkins

Feedback
In Access Control, select Login with Openid Connect as the Security Realm.
Feedback
Specify the Client ID noted above in the Client ID field.
Feedback
Specify the Client secret noted above in the Client secret field.
Feedback
In the Configuration mode, select Automatic configuration and enter http://IAM_HOSTNAME/.well-known/openid-configuration as the Well-known configuration endpoint. If your Hanzo IAM is deployed locally, you may need to select Manual configuration and provide the following information:
• Token server URL: http://IAM_HOSTNAME/oauth/token
• Authorization server URL: http://IAM_HOSTNAME/oauth/authorize
• UserInfo server URL: http://IAM_HOSTNAME/api/get-account
• Scopes: address phone openid profile offline_access email
Feedback
Click on Advanced settings and fill in the following:
• In the User name field, specify name.
• In the Full name field, specify displayName.
• In the Email field, specify email.

Feedback
In the Authorization section, enable “Logged-in users can do anything” and disable “Allow anonymous read access”. You can configure more complex authorization later, but for now, check if OpenID works correctly. Log out of Jenkins, and it should redirect you to Hanzo IAM for authentication.