Configure Feishu Authentication Source

Feishu authentication login allows users to securely log in to third-party applications or websites using Feishu as the authentication source. To facilitate enterprise user authentication login, the IDaaS platform supports configuring Feishu as an authentication source. Users can authenticate and log in to various application systems through Feishu, bringing enterprise users a simpler and more convenient login method and better user experience.

This guide explains the related operations for configuring a Feishu authentication source.

Prerequisites

• Administrator permissions for the Feishu Open Platform.
• Administrator permissions for the IDaaS Enterprise Center.

Procedure

Create Application on Feishu Open Platform

1. Log in to the Feishu Open Platform, choose Developer Console, click Create App, and enter the basic application information.

   

2. After creation, click the application name to enter the application detail page, switch to the Credentials & Basic Info tab, and obtain the AppID and AppSecret parameters.

   

   

3. Switch to the App Features > Webpage tab, and enable the webpage function.

   

4. Switch to the Security Settings tab, and configure the redirect URL (callback address after Feishu authentication succeeds) and IP whitelist.

   

   TIP

   • Replace xxx in the redirect URL with your enterprise IDaaS tenant domain. Example: https://xxx.bccastle.com/api/v1/login/feishuqr. The tenant domain is obtained in the IDaaS Enterprise Center under Settings > Enterprise Info.
   • The IP whitelist is the enterprise trusted IP: 47.92.171.137.

5. Switch to the Permission Management tab, and configure the permissions required by the application, including obtaining user email, user mobile number, and user basic information.

   

6. After configuration, switch to the Version Management & Release tab, click Create Version, set the application version number, and set availability status.

   

   

7. After configuration, submit the application. Log in to your Feishu Admin Console, and approve the application under Workspace > App Review.

   

Configure Feishu Authentication Source in IDaaS

1. Log in to the IDaaS Enterprise Center, choose Authentication > Authentication Source Management from the top navigation bar, enter the Feishu authentication source page, and click Add Authentication Source.

   

2. Configure the Feishu authentication source parameters as prompted. Key parameters are described below.

   

   TIP

   • The function of source association attribute and user association attribute: Map one attribute of the user in Feishu to one attribute of the user in IDaaS. If this attribute in the Feishu returned user information matches the associated attribute in IDaaS, authentication succeeds.
   • When User Not Associated: When the source attribute of the Feishu returned user information does not match the associated attribute in IDaaS, and no system user is associated, the configuration options are as follows.

     • Fail: Set to Fail, meaning the user is not allowed to pass authentication.

     • Bind: Set to Bind. When no user is associated, the page redirects to the mobile number or email verification page. Enter an existing IDaaS mobile number or email, and after successful verification, the user passes authentication.

     • Bind or Register: Set to Bind or Register. When no user is associated, the page redirects to the mobile number or email verification page. Enter an existing IDaaS mobile number or email, and after successful verification, the user passes authentication. If the mobile number or email does not exist in IDaaS, an IDaaS user is created based on the mobile number and passes authentication.

     • Auto Create User: Set to Auto Create User. Click Add Mapping to map user attributes from Feishu to IDaaS user attributes based on mapping rules and associated attributes, and create the user so that the user can pass authentication.

       Attribute descriptions are as follows:

       • User Attribute Name: Select an IDaaS user attribute from the dropdown.

       • Mapping Type: Select authentication source attribute.

       • Authentication Source Attribute Name: Feishu user attribute. For details, refer to Feishu Open Platform - Get User Info.