Problem: Where do I find the OIDC configuration using env variable (was: Use OIDC env variable is not possible)

[bernd-mueller-el]

Issue

I found this PR, unmerged #2324
and this release information https://semaphoreui.com/releases/semaphore-v2_14#oidc_env_var
and I cannot find OIDC in https://github.com/semaphoreui/semaphore/blob/develop/deployment/docker/server/server-wrapper

How can I use OIDC configuration via env variables?

Impact

Docker

Installation method

Docker

Database

No response

Browser

No response

Semaphore Version

9f747cea77a4:~$ semaphore version
v2.15.0-1e13324-1749881669

Ansible Version

Logs & errors

No OIDC configuration in config.json in container

Manual installation - system information

No response

Configuration

podman-compose.yml
services:
mysql:
...
semaphore:
environment:
SEMAPHORE_OIDC_PROVIDERS: '{"azuread": {"color": "blue"}}'

Additional information

No response

[bernd-mueller-el]

OK, this configuration is not in config.json. Where can I find the configuration of OIDC using env variable?

[EHEX-schildt]

This works for me – it contains jinja2 style vars you need to replace:
{{ idp_domain }}
{{ semaphore_domain }}
{{ semaphore_oidc_client_id }}
{{ semaphore_oidc_client_secret }}

SEMAPHORE_OIDC_PROVIDERS={"{{ idp_domain }}":{"provider_url":"https://{{ idp_domain }}/oauth2/openid/{{ semaphore_oidc_client_id }}","client_id":"{{ semaphore_oidc_client_id }}","client_secret":"{{ semaphore_oidc_client_secret }}","redirect_url":"https://{{ semaphore_domain }}/api/auth/oidc/{{ idp_domain }}/redirect","name_claim":"name","display_name":"Sign in with {{ idp_domain }}"}}

[bernd-mueller-el]

@EHEX-schildt thank you, I will try this, but can you tell me the {{ idp_domain }}? Is it azure or azuread and you use it also in provider_url, there I tested login.microsoftonline.com.
You use also {{ semaphore_oidc_client_id }} in client_id and in provider_url. In docu [1] there is the following
https://login.microsoftonline.com//v2.0 # SECRET=Directory (tenant) ID

[1] https://docs.semaphoreui.com/administration-guide/openid/azure/

[EHEX-schildt]

can you tell me the {{ idp_domain }}?

I don't have Microsoft azure as IdP and i think you need to replace the entire provider_url and redirect_url like in the doc you already found.

I just wanted to show case a working OIDC Config via ENV Vars as syntax reference.