Posts

Showing posts with the label Camunda 8 authentication

🔐 Azure AD + Camunda 8 SSO Setup – Complete OIDC Guide

Image
 Setting up Single Sign-On (SSO) between Camunda 8 and Microsoft Azure Active Directory (Azure AD) is a must-have requirement for enterprise deployments . This integration enables: ✔ Centralized authentication ✔ Login using corporate Azure AD accounts ✔ Secure OAuth2 / OIDC authentication ✔ Role-based access control (RBAC) ✔ Seamless user experience across Tasklist, Operate, and Optimize ⭐ 1. SSO Architecture Overview Authentication Flow User opens Tasklist / Operate Camunda redirects to Azure AD User authenticates (SSO) Azure AD returns an OIDC ID Token Camunda Identity (Keycloak) validates the token Access is granted based on mapped roles 👉 Camunda Identity is the central component handling authentication. ⭐ 2. Prerequisites Before starting, ensure you have: ✔ Camunda 8 deployed (AKS / Kubernetes / Docker) ✔ Active Azure AD tenant ✔ Azure AD admin privileges ✔ Public domain with HTTPS ✔ Access to Azure Portal ⭐ 3. Register Camunda 8...

🔐 Azure AD + Camunda 8 SSO – Complete Setup Guide (OIDC)

Image
Configurer le SSO (Single Sign-On) entre Camunda 8 et Microsoft Azure Active Directory (Azure AD) est une exigence clĂ© en environnement entreprise . Cette intĂ©gration permet : ✔ Authentification centralisĂ©e ✔ Connexion avec comptes entreprise ✔ Gestion fine des rĂŽles et permissions ✔ SĂ©curitĂ© renforcĂ©e (OIDC, OAuth2) ✔ ExpĂ©rience utilisateur fluide (SSO rĂ©el) Cette architecture est couramment utilisĂ©e dans les environnements microservices modernes. 👉  environnements microservices modernes ⭐ 1. Architecture SSO – Vue d’ensemble Flux d’authentification : L’utilisateur accĂšde Ă  Tasklist / Operate Camunda redirige vers Azure AD L’utilisateur s’authentifie (SSO) Azure AD renvoie un ID Token (OIDC) Camunda Identity valide le token AccĂšs accordĂ© selon les rĂŽles 👉 Camunda Identity est le composant central pour le SSO. ⭐ 2. PrĂ©requis Avant de commencer, assurez-vous d’avoir : ✔ Camunda 8 dĂ©ployĂ© (AKS / Kubernetes / Docker) ✔ Un tenant Azure AD acti...