search

Azure / appcat-rulesets

Repository for maintaining Rulesets for Windup
Eclipse Public License 2.0
6 stars 10 forks source link

fully detect Identity providers, enrich related message #135

Closed KaiqianYang closed 1 year ago

KaiqianYang commented 1 year ago

https://learn.microsoft.com/en-us/azure/developer/java/migration/migrate-spring-cloud-to-azure-spring-apps?toc=%2Fazure%2Fspring-apps%2Ftoc.json&bc=%2Fazure%2Fspring-apps%2Fbreadcrumb%2Ftoc.json&pivots=sc-standard-tier#migrate-and-enable-the-identity-provider

If any of the Spring Cloud applications require authentication or authorization, ensure they're configured to access the identity provider:

If the identity provider is Azure Active Directory, no changes should be necessary. If the identity provider is an on-premises Active Directory forest, consider implementing a hybrid identity solution with Azure Active Directory. For guidance, see the Hybrid identity documentation. If the identity provider is another on-premises solution, such as PingFederate, consult the Custom installation of Azure AD Connect topic to configure federation with Azure Active Directory. Alternatively, consider using Spring Security to use your identity provider through OAuth2/OpenID Connect or SAML.

showpune commented 1 year ago

I think it is an technical usage for AAD/SSO, check the openid/SAML is enought