Configure DingTalk Password-Free Login

This guide explains the configuration process for users to log in to IDaaS-integrated applications without a password within the DingTalk PC client and mobile APP. After configuring the DingTalk authentication source integration in the IDaaS platform, refer to this module to configure DingTalk password-free login for various application systems.

Prerequisites

• Access management permissions for the IDaaS Enterprise Center.
• DingTalk Developer Console account administrator permissions, and an application has been created.
• The application has been integrated into the IDaaS platform.
• The DingTalk authentication source has been configured in the IDaaS platform.

Configuration Flow

Procedure

TIP

The example application in this guide is an OAuth authentication protocol application created in IDaaS: OAUTH_1.

Configure DingTalk Authentication for Application

1. Log in to the IDaaS Enterprise Center, choose Resources > Apps from the top navigation bar. This guide uses the OAuth authentication protocol application as an example. Select OAUTH_1, switch to the Login Configuration tab, select DingTalk from the dropdown, and enable the previously added DingTalk authentication source.

   

   TIP

   Please remember the View URL address under the authentication source. We will configure it as the application homepage address in the DingTalk Open Platform.

   TIP

   Some pre-integrated applications do not support IDP-initiated single sign-on. Please ignore this step, for example, Huawei Cloud and Tencent Cloud.

DingTalk Management Console Configuration

1. Log in to the DingTalk Developer Console, create the OAUTH_1 application, choose Basic Information > Development Management, and modify the Application Homepage URL and PC Homepage URL to the URL saved when enabling the DingTalk authentication source for the application in IDaaS.

   

   TIP

   For password-free login to Huawei Cloud, Tencent Cloud, and other applications, the application homepage address is the login link for creating an identity provider in the Huawei Cloud or Tencent Cloud console.

Verify DingTalk Client Password-Free Login

1. The user logs in to the DingTalk PC client, finds the application created in DingTalk, and clicks the application to log in to OAUTH_1 without a password.
2. The user logs in to the DingTalk mobile APP, finds the application created in DingTalk, and clicks the application to log in to OAUTH_1 without a password.