Harbor: Harbor and Azure Active Directory

Created on 22 Sep 2019 · 2Comments · Source: goharbor/harbor

Hi All, I would like to know if Harbor supports authentication via Azure Active Directory, is there any documentation about that integration ?

Many thanks.

areldap kinrequirement

Source

roldancer

👍4

Most helpful comment

This works when using the oicd provider.

Create an app registraion in azure ad.
Note down the tenant id and client id.
Create a secret for the app registration.
Note down the secret.
In Harbor select the oicd authentication method.
The name can be anything you want.
The endpoint is https://login.microsoftonline.com/{tenant-id}/v2.0 (note that it does not end with a /, and does not include the ".well-known/openid-configuration" part).
Enter the client-id and secret
Use the scope "openid,email,profile" (no spaces).
Testing the connection should work.
Save, log out and try to login using the "Login using OICD" button.

yaron on 21 Feb 2020

👍5

It is not supported. Can you please test and let us know if there are any issues, and we can support from there? @roldancer

xaleeks on 11 Nov 2019

This works when using the oicd provider.

Create an app registraion in azure ad.
Note down the tenant id and client id.
Create a secret for the app registration.
Note down the secret.
In Harbor select the oicd authentication method.
The name can be anything you want.
The endpoint is https://login.microsoftonline.com/{tenant-id}/v2.0 (note that it does not end with a /, and does not include the ".well-known/openid-configuration" part).
Enter the client-id and secret
Use the scope "openid,email,profile" (no spaces).
Testing the connection should work.
Save, log out and try to login using the "Login using OICD" button.