Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

This feature enables CloudStack administrators to configure domain-specific OAuth2 providers. In multi-tenant environments, each domain (representing a customer, department, or team) can have its own OAuth2 provider configuration. This allows organizations to maintain separate OAuth credentials per domain, ensuring users authenticate against the correct identity provider for their team.

Scope:

...

  • Allow registration of OAuth providers for specific domains

...

  • Add domain-level oauth2.enabled setting to control OAuth availability per domain
  • In UI, add

...

  • OAuth Login tab

...

  • (enabled when at least one provider is enabled globally or in a domain)
  • In the

...

  • OAuth Login tab, show

...

  • global providers by default
  • And when domain is entered, show only domain-specific providers; if none exist, indicate with message
  • Error handling - duplicate provider rejection, provider not found, OAuth disabled for domain

UI Mockups: 



API Changes:

registerOAuthProvider

...