diff --git a/public/docs-static/img/manage/team/single-sign-on/cidaas-idp/app-created.png b/public/docs-static/img/manage/team/single-sign-on/cidaas-idp/app-created.png new file mode 100644 index 000000000..2d772c8ac Binary files /dev/null and b/public/docs-static/img/manage/team/single-sign-on/cidaas-idp/app-created.png differ diff --git a/public/docs-static/img/manage/team/single-sign-on/cidaas-idp/app-details.png b/public/docs-static/img/manage/team/single-sign-on/cidaas-idp/app-details.png new file mode 100644 index 000000000..6f9e343c4 Binary files /dev/null and b/public/docs-static/img/manage/team/single-sign-on/cidaas-idp/app-details.png differ diff --git a/public/docs-static/img/manage/team/single-sign-on/cidaas-idp/app-settings.png b/public/docs-static/img/manage/team/single-sign-on/cidaas-idp/app-settings.png new file mode 100644 index 000000000..935010ee1 Binary files /dev/null and b/public/docs-static/img/manage/team/single-sign-on/cidaas-idp/app-settings.png differ diff --git a/public/docs-static/img/manage/team/single-sign-on/cidaas-idp/app-status.png b/public/docs-static/img/manage/team/single-sign-on/cidaas-idp/app-status.png new file mode 100644 index 000000000..ae8874ef1 Binary files /dev/null and b/public/docs-static/img/manage/team/single-sign-on/cidaas-idp/app-status.png differ diff --git a/public/docs-static/img/manage/team/single-sign-on/cidaas-idp/company-settings.png b/public/docs-static/img/manage/team/single-sign-on/cidaas-idp/company-settings.png new file mode 100644 index 000000000..a679644cf Binary files /dev/null and b/public/docs-static/img/manage/team/single-sign-on/cidaas-idp/company-settings.png differ diff --git a/src/pages/manage/team/single-sign-on/cidaas.mdx b/src/pages/manage/team/single-sign-on/cidaas.mdx new file mode 100644 index 000000000..65e9a3734 --- /dev/null +++ b/src/pages/manage/team/single-sign-on/cidaas.mdx @@ -0,0 +1,92 @@ +import {Note} from "@/components/mdx"; + +# cidaas on NetBird Cloud + +You can use [cidaas](https://www.cidaas.com/) as your Identity Provider with NetBird, but it will require some additional configuration steps. cidaas is a cloud-native Identity and Access Management platform that provides single sign-on, multi-factor authentication, user self-service, and fine-grained authorization. + + + Support for OIDC-compliant IdPs is available on the Team plan and higher. + The Free plan supports Google, Microsoft, and social logins. + + +## Step 1: Create a New Application + +Log in to your cidaas tenant's admin console (e.g., `https://.cidaas.eu`). Click **Apps** in the left-hand sidebar, select **App Settings**, then click **+ Create New App**. + +This opens the **Create App** form, which is divided into three sections: **App Details**, **App Settings**, and **Company Details**. + +## Step 2: Fill in App Details + +Configure the App Details section with the following settings: +- **App Name**: `NetBird` +- **App Display Name**: `NetBird` +- **App Logo URL**: `https://netbird.io/_next/static/media/netbird-logo.46570303.svg` +- **App Type**: `Regular` + +

+ cidaas-app-details +

+ +Click **Next** to proceed to App Settings. + +## Step 3: Configure App Settings + +Configure the App Settings section with the following settings: +- **Scopes**: `openid`, `email`, `profile` +- **Hosted Page Group**: `default` +- **OAuth Standard**: `OAuth2.1` +- **Redirect URLs**: `https://login.netbird.io/login/callback` +- **Allow Logout URLs**: `https://login.netbird.io/oauth/revoke` + +

+ cidaas-app-settings +

+ +Click **Next** to proceed to Company Settings. + +## Step 4: Configure Company Settings + +Configure the App Settings section with the following settings: +- **Company Name**: `NetBird GmbH` +- **Company Address**: `Brunnenstraße 196 10119 Berlin` +- **Website URL**: `https://netbird.io` +- **Terms and Conditions URL**: `https://netbird.io/terms` +- **Privacy Policy URL**: `https://netbird.io/privacy` +- **Imprint URL**: `https://netbird.io/imprint` + +

+ cidaas-company-settings +

+ +Click **Submit** to create the application. You should see an **App created successfully** confirmation. + +

+ cidaas-app-created +

+ +## Step 5: Verify the Application Status + +Ensure the application status is set to **Active**. If it is not active, select **Active** from the status dropdown. + +

+ cidaas-app-status +

+ +## Step 6: Copy the Client Credentials + +From the application's **App Settings** tab, copy the **Client ID** and **Client Secret**. + +## Step 7: Share Configuration with NetBird + +Send the following information to the NetBird support team at support@netbird.io: + +- **Client ID** +- **Client Secret** +- **cidaas Tenant URL** (e.g., `https://your-tenant.cidaas.eu`) +- **Email domains for your users** + + +We recommend using a secure channel to share the Client Secret. You can send a separate email and use a secret sharing service like:
+- https://onetimesecret.com/en/
+- https://password.link/en
+
\ No newline at end of file diff --git a/src/pages/manage/team/single-sign-on/index.mdx b/src/pages/manage/team/single-sign-on/index.mdx index cc3e05826..c1cc0cde0 100644 --- a/src/pages/manage/team/single-sign-on/index.mdx +++ b/src/pages/manage/team/single-sign-on/index.mdx @@ -74,4 +74,10 @@ to integrate with NetBird. Below are the steps to set up different OIDC-complian [Duo Security](https://duo.com/) is a cloud-based security platform that provides secure access through single sign-on (SSO), multi-factor authentication (MFA), and device trust. Duo offers comprehensive identity verification and access policies to protect applications and data, with a focus on zero-trust security architecture. - \ No newline at end of file + + +### cidaas + +[cidaas](https://www.cidaas.com/) is a cloud-native Identity and Access Management platform that supports OpenID Connect, OAuth 2.0, and SAML 2.0. It provides single sign-on, multi-factor authentication, user self-service, and fine-grained authorization. + +