Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Optional OAuth login with Trivore ID

WARNING: This is not recommended at this time unless onePortal and the client registration is configured very securely. Grafana accepts the email address from the login, even if it is not a verified email address. Therefore if an user can change their primary email to match another Grafana user, they can log in to Grafana as this other user.Grafana supports using an external OAuth system for logging in.

Register a new OpenID Client in Trivore ID with settings:

Setting

Value

Confidential

Selected

Redirect URLs

https://YOUR.GRAFANA.SERVER/login/generic_oauth

Set it up in the Grafana configuration file in the [auth.generic_oauth] section:

Code Block
languagetext
#################################### Generic OAuth ##########################
[auth.generic_oauth]
enabled = true
name = onePortal
;allow_sign_up = true
client_id = YOUR_CLIENT_ID
client_secret = YOUR_CLIENT_SECRET
scopes = openid profile email
auth_url = https://YOUR.ONEPORTALTRIVOREID.SERVER/openid/auth
token_url = https://YOUR.ONEPORTALTRIVOREID.SERVER/openid/token
api_url = https://YOUR.ONEPORTALTRIVOREID.SERVER/openid/userinfo

You still need to create user accounts in Grafana and send invites. If you enable allow_sign_up this may be skipped.

...

After logging in to Grafana you are suggested to add a Data Source. Add an InfluxDB data source. If you run Grafana on the same server as InfluxDB, you can use the following settings:

Setting

Example value

Name

influxdb

Type

InfluxDB

Default

Selected

URL

http://localhost.8086

Access

Server

Database

oneportal

User

root

Password

****

Examples

Panels

Time spent on filterable-service queries:Image Removed

...

Dashboards

Download and import the JSON file as a new dashboard by clicking the + icon and selecting "Import", then "Upload .json File".

View file
nameFilterable Service examples-1558684802414.json

...