JarCasting
JarCasting JarCasting

Sonar OpenID Plugin

Enable user authentication and Single Sign-On through an OpenID provider

License

License
GroupId

GroupId

org.codehaus.sonar-plugins
ArtifactId

ArtifactId

sonar-openid-plugin
Last Version

Last Version

1.2
Release Date

Release Date
Type

Type

sonar-plugin
Description

Description

Sonar OpenID Plugin
Enable user authentication and Single Sign-On through an OpenID provider
Project Organization

Project Organization

SonarSource
Source Code Management

Source Code Management

https://github.com/SonarCommunity/sonar-openid

Download sonar-openid-plugin

Filename Size
sonar-openid-plugin-1.2.pom
sonar-openid-plugin-1.2.jar 1 MB
sonar-openid-plugin-1.2-sources.jar 9 KB
sonar-openid-plugin-1.2-javadoc.jar 65 KB
Browse

Dependencies

compile (4)

Group / Artifact Type Version
org.openid4java : openid4java-nodeps jar 0.9.6
com.google.inject : guice jar 2.0
net.sourceforge.nekohtml : nekohtml jar 1.9.10
org.apache.httpcomponents : httpclient jar 4.0.3

provided (3)

Group / Artifact Type Version
org.codehaus.sonar : sonar-plugin-api jar 3.1
org.slf4j : slf4j-api jar 1.6.4
javax.servlet : servlet-api jar 2.4

test (4)

Group / Artifact Type Version
junit : junit jar 4.10
org.easytesting : fest-assert jar 1.4
org.mockito : mockito-all jar 1.9.0
org.slf4j : slf4j-nop jar 1.6.4

Project Modules

There are no modules declared in this project.

Sonar OpenID Plugin

Build Status

Download and Version information: http://update.sonarsource.org/plugins/openid-confluence.html

Description / Features

This plugin enables user authentication and Single Sign-On via an OpenID provider:

  • Support OpenID Authentication 2.0
  • Support Google accounts
  • On the fly creation of users in SonarQube

Installation

  1. Install the plugin through the Update Center or download it into the SONARQUBE_HOME/extensions/plugins directory
  2. Restart the SonarQube server

Usage

The following properties must be added to SONARQUBE_HOME/conf/sonar.properties:

# This property must be set to true
sonar.authenticator.createUsers=true
 
# Enable OpenID plugin
sonar.security.realm=openid
 
# URL of OpenID provider
sonar.openid.providerUrl=https://www.google.com/accounts/o8/id
 
# URL of logout page
sonar.openid.providerLogoutUrl=https://www.google.com/accounts/Logout
 
# URL of SonarQube server
sonar.openid.sonarServerUrl=http://localhost:9000
 
# Optional properties:
sonar.authenticator.updateUserAttributes=true
# If set to 'true', at each login, user's attributes (name, email, etc.)
# are re-synchronized. If set to 'false', user's attributes are not
# re-synchronized except when creating the user for the first time

Technical Users

Since SonarQube 4.2, technical users can be set. Technical users are authenticated against SonarQube's own database of users, rather than against any external tool (LDAP, Active Directory, Crowd, etc.).

Similarly, all accounts not flagged as local will be authenticated only against the external tool. By default admin is a technical account. Technical accounts are configured in SONARQUBE_HOME/conf/sonar.properties in the sonar.security.localUsers (default value = admin) property as a comma-separated list.

Logs

Note that the library openid4java generates many INFO logs. For versions prior to SonarQube 4.1, edit the file conf/logback.xml and add the following loggers to log only warnings and errors:

<logger name="org.openid4java">
  <level value="WARN"/>
</logger>

Versions

Version
1.2
1.1
1.0