@@ -142,6 +142,29 @@ security:
142142 callbackUrl : " http://127.0.0.1:5173/login"
143143 iconUri : " "
144144 provider : gitee
145+ oidc :
146+ enable : false
147+ providers :
148+ # registrationId used in URLs and internal mapping
149+ keycloak :
150+ display-name : " Login with Keycloak" # Text for UI Button
151+ issuer-uri : http://keycloak:8080/realms/dolphinscheduler
152+ icon-uri : " /images/providers-icon/keycloak.png"
153+ client-id : dolphinscheduler-client
154+ client-secret : dolphinscheduler-client-secret
155+ # Optional: Specify client auth method (e.g., client_secret_basic, client_secret_post). Defaults if omitted.
156+ # client-authentication-method: client_secret_basic
157+ scope : openid, profile, email, groups # Default: openid, profile, email
158+ user-name-attribute : preferred_username # Claim to use as username (e.g., email, preferred_username)
159+ groups-claim : groups # Optional: Claim containing user groups/roles
160+ # Add more providers here (e.g., okta, azure, google)
161+ # okta: ....
162+ user : # Settings for auto-provisioning OIDC users
163+ auto-create : false # Create a DS user if not found? Default: false
164+ default-tenant-code : " default" # Tenant code for auto-created users
165+ default-queue : " default" # Queue for auto-created users (if needed by permissions)
166+ admin-group-mapping : # Groups that map to an administrator role
167+ - dolphinscheduler-admins
145168
146169casdoor :
147170 # Your Casdoor server url
0 commit comments