Configuring single sign-on (AEN 4.2.0)
======================================

.. raw:: html

    <p>AEN&#8217;s single sign-on (SSO) capability creates a new authentication provider
    that defers to your Anaconda Repository for login and authentication cookies.</p>
    <p>To enable SSO:</p>
    <ol class="arabic">
    <li><p class="first">Deploy AEN and Repository on the same machine.</p>
    </li>
    <li><p class="first">In the <code class="docutils literal"><span class="pre">/opt/wakari/wakari-server/etc/wakari/config.json</span></code> file, add:</p>
    <div class="highlight-bash"><div class="highlight"><pre><span></span><span class="o">{</span>
    EXISTING_CONFIGURATION,
    <span class="s2">&quot;SECRET_KEY&quot;</span>: <span class="s2">&quot;&lt;repo signing secret&gt;&quot;</span>,
    <span class="s2">&quot;REPO_LOGIN_URL&quot;</span>:
       <span class="s2">&quot;http://example_repo.com:8080/account/login?next=http://example_repo.com/&quot;</span>
    <span class="o">}</span>
    </pre></div>
    </div>
    </li>
    <li><p class="first">Copy the <code class="docutils literal"><span class="pre">SECRET_KEY</span></code> from the Repository configuration file.</p>
    </li>
    <li><p class="first">In the <code class="docutils literal"><span class="pre">/opt/wakari/wakari-server/etc/wakari/wk-server-config.json</span></code> file, modify:</p>
    <div class="highlight-bash"><div class="highlight"><pre><span></span><span class="o">{</span>
    EXISTING_CONFIGURATION,
    <span class="s2">&quot;accounts&quot;</span>: <span class="s2">&quot;wk_server.plugins.accounts.repo&quot;</span>,
    <span class="o">}</span>
    </pre></div>
    </div>
    </li>
    <li><p class="first">To activate the changes restart <code class="docutils literal"><span class="pre">wakari-server</span</code>:</p>
    <div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">sudo</span> <span class="n">service</span> <span class="n">wakari</span><span class="o">-</span><span class="n">server</span> <span class="n">restart</span>
    </pre></div>
    </div>
    </li>
    </ol>
    <p>SSO is enabled.</p>
