Chapter 3. Configuring an identity provider for OpenShift Dedicated

Configure an identity provider for your OpenShift Dedicated cluster to manage users and groups.

Important

Adding more than one OpenShift Identity Provider can create problems when the same user name exists in multiple providers.

When mappingMethod is set to claim (the default mapping method for identity providers) and multiple providers have credentials associated with the same user name, the first provider used to log in to OpenShift is the one that works for that user, regardless of the order in which identity providers are configured.

Refer to Identity provider parameters in the OpenShift Dedicated documentation for more information about mapping methods.

Prerequisites

Procedure

  1. Log in to OpenShift Cluster Manager (https://console.redhat.com/openshift/).
  2. Click Clusters. The Clusters page opens.
  3. Click the name of the cluster to configure.
  4. Click the Access control tab.
  5. Click Add identity provider.

    1. Select your provider from the Identity Provider list.
    2. Enter a unique Name for the identity provider. You cannot change this name later.
    3. Select a Mapping method from the drop-down menu.
    4. Enter a Client ID and Client secret.
    5. Optional: Enter a Hostname to connect to either GitHub or GitHub Enterprise.
    6. Select Use organizations or Use teams to restrict access to a particular GitHub organization or a GitHub team.
    7. Enter the name of the organization or team you want to restrict access to. Click Add more to specify multiple organizations or teams that users can be a member of.
    8. Click Confirm.

Verification

  • The configured identity providers are visible on the Access control tab of the Cluster details page.

3.1. Identity management options for OpenShift Data Science

Red Hat OpenShift Data Science supports the same authentication systems as Red Hat OpenShift Dedicated and Red Hat OpenShift Service on Amazon Web Services (AWS).

Check the appropriate documentation for your cluster for more information.