Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

This feature enables CloudStack administrators to configure domain-specific OAuth2 providers. In multi-tenant environments, each domain (representing a customer, department, or team) can have its own OAuth2 provider configuration. This allows organizations to maintain separate OAuth credentials per domain, ensuring users authenticate against the correct identity provider for their team.

Scope:

  • Allow registration of OAuth providers for specific domains
  • Add domain-level oauth2.enabled setting to control OAuth availability per domain
  • In UI, add OAuth Login tab (enabled when at least one provider is enabled globally or in a domain)
  • In the OAuth Login tab, show global providers by default
  • And when domain is entered, show only domain-specific providers; if none exist, indicate with message
  • Error handling - duplicate provider rejection, provider not found, OAuth disabled for domain

UI Mockups: 
Image Removed
Image Added

API Changes:

registerOAuthProvider

...