Redmine Single Sign-On

Overview

This article describes the single sign-on configuration process between Redmine 3.0 and above and BambooCloud IDaaS, achieving unified login for Redmine and single sign-on effects between application systems, providing users with a simpler and more convenient login method and a better user experience.

Authentication Configuration

Redmine Configuration

1. Install the plugin. This process takes the Linux environment as an example: Plugin address.

2. Download the plugin to the plugins directory.

   git clone https://github.com/chrodriguez/redmine_omniauth_saml.git

   

   cd redmine_omniauth_saml/
   bundle install
   # Run from the root directory of Redmine
   RAILS_ENV=production bundle exec rake redmine:plugins

3. Edit authentication parameters and add the saml.rb file to the <redmine_folder>/config/initializers directory.

   There is a sample file sample-saml-initializers.rb in the plugin folder.

   A sample file content is shown below:

   

   Parameter	Parameter Description
   assertion_consumer_service_url	Redmine actual address
   issuer	Redmine actual address
   single_logout_service_url	Redmine logout address
   idp_sso_target_url	BambooCloud IDaaS login address
   idp_cert_fingerprint	Certificate fingerprint
   name_identifier_format	Fixed format: urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
   idp_slo_target_url	BambooCloud IDaaS logout address
   name_identifier_value	Fixed value: login
   attribute_mapping	BambooCloud IDaaS and Redmine attribute mapping relationship:

:login => 'extra.raw_info.username'

:mail => 'extra.raw_info.email'

:firstname => 'extra.raw_info.firstname'

:lastname => 'extra.raw_info.lastname' |

To download BambooCloud IDaaS IDP metadata, visit https://{your_domain}/api/v1/saml2/idp/metadata.

TIP

How to obtain the IDP certificate fingerprint (choose one):

• Copy the IDP certificate content from BambooCloud IDaaS Enterprise Center - Settings > Service Configuration > IDP Configuration, save it as an idp.cer file, and view the certificate file.

• Copy the certificate content and calculate the certificate fingerprint through the online tool.

  

1. Restart Redmine.

2. Log in to the Redmine management console to configure the login page display content.

3. Click Configre to configure the login page display content.

   

BambooCloud IDaaS Configuration

1. Add the pre-integrated application Redmine.

   

2. Authentication parameter configuration.

   Parameter	Description
   SP Entity ID	The issuer parameter in the saml.rb file
   Assertion Consumer Service URL (ACS URL)	The assertion_consumer_service_url parameter in the saml.rb file
   Name ID	Application Account
   NameID Format	The name_identifier_format in the saml.rb file
   Audience URI	The issuer parameter in the saml.rb file

3. In the application details, Authentication Configuration > Mapping Configuration, add firstname, lastname, email, and username attributes.

   

4. Enter the application details, Authorization Management > Application Account, click the Add Account button, and select the authorized user.

Login Verification

Two login methods are as follows:

• Initiate authentication from the Redmine login page.

  

• Click the application logo in the BambooCloud IDaaS User Center to single sign-on into Redmine.