|
| 1 | +### Specify 7 - Single Sign-On (SSO) Configuration for Feide |
| 2 | + |
| 3 | +Specify 7 supports integration with institutional identity providers using Single Sign-On (SSO). This guide outlines the steps required to configure SSO using Feide, Norway’s federated educational identity provider. |
| 4 | + |
| 5 | +### Benefits of Using Feide for SSO |
| 6 | + |
| 7 | +Integrating Specify 7 with Feide provides the following advantages: |
| 8 | + |
| 9 | +- Reduces the number of required logins for users, enhancing user experience. |
| 10 | +- Improves institutional security by utilizing a single set of secure credentials. |
| 11 | + |
| 12 | +### Configuration Steps |
| 13 | + |
| 14 | +1. **Obtain Feide Client Credentials:** |
| 15 | + An institutional IT administrator must register Specify 7 as an application with Feide to obtain: |
| 16 | + - Client ID |
| 17 | + - Client Secret |
| 18 | + |
| 19 | +2. **Configure Specify 7 Server:** |
| 20 | + Edit the `specify_settings.py` configuration file on your Specify 7 server to include Feide as an OAuth provider: |
| 21 | + |
| 22 | +```python |
| 23 | +OAUTH_LOGIN_PROVIDERS = { |
| 24 | + 'feide': { |
| 25 | + 'title': "Feide", |
| 26 | + 'client_id': "YOUR_FEIDE_CLIENT_ID", |
| 27 | + 'client_secret': "YOUR_FEIDE_CLIENT_SECRET", |
| 28 | + 'config': "https://auth.dataporten.no", |
| 29 | + 'scope': "openid email profile", |
| 30 | + }, |
| 31 | +} |
| 32 | +``` |
| 33 | +Replace `YOUR_FEIDE_CLIENT_ID` and `YOUR_FEIDE_CLIENT_SECRET` with credentials provided by Feide. |
| 34 | + |
| 35 | +3. **Inviting Users through Specify 7:** |
| 36 | + Collection administrators can link Feide accounts by generating invitation links for new users: |
| 37 | + - Navigate to the **Security and Accounts** panel in Specify 7. |
| 38 | + - Create a new user account and select the option to generate an invitation link. |
| 39 | + - Share this link with the intended user. |
| 40 | + |
| 41 | +4. **Associating Feide Account with Specify User:** |
| 42 | + Users clicking the invitation link will be prompted to associate their Feide account with their Specify 7 user profile: |
| 43 | + - Click the invitation link received. |
| 44 | + - Select "Feide" as the login option. |
| 45 | + - Authenticate via Feide when prompted. |
| 46 | + |
| 47 | +5. **User Login Experience:** |
| 48 | + Once configured, the Specify 7 login screen will display an option for Feide authentication alongside standard username/password login. |
| 49 | + |
| 50 | +### Additional Support |
| 51 | + |
| 52 | +If your institution is using Specify Cloud, contact our support team for assistance with Feide SSO configuration. |
| 53 | + |
0 commit comments