...
Optional OAuth login with Trivore ID
WARNING: This is not recommended at this time unless onePortal™ and the client registration is configured very securely. Grafana accepts the email address from the login, even if it is not a verified email address. Therefore if an user can change their primary email to match another Grafana user, they can log in to Grafana as this other user.Grafana supports using an external OAuth system for logging in.
Register a new OpenID Client in Trivore ID with settings:
Setting | Value |
---|---|
Confidential | Selected |
Redirect URLs | https://YOUR.GRAFANA.SERVER/login/generic_oauth |
Set it up in the Grafana configuration file in the [auth.generic_oauth] section:
Code Block | ||
---|---|---|
| ||
#################################### Generic OAuth ########################## [auth.generic_oauth] enabled = true name = onePortal ;allow_sign_up = true client_id = YOUR_CLIENT_ID client_secret = YOUR_CLIENT_SECRET scopes = openid profile email auth_url = https://YOUR.ONEPORTALTRIVOREID.SERVER/openid/auth token_url = https://YOUR.ONEPORTALTRIVOREID.SERVER/openid/token api_url = https://YOUR.ONEPORTALTRIVOREID.SERVER/openid/userinfo |
You still need to create user accounts in Grafana and send invites. If you enable allow_sign_up
this may be skipped.
...
After logging in to Grafana you are suggested to add a Data Source. Add an InfluxDB data source. If you run Grafana on the same server as InfluxDB, you can use the following settings:
Setting | Example value |
---|---|
Name |
|
Type | InfluxDB |
Default | Selected |
URL |
|
Access | Server |
Database |
|
User |
|
Password |
|
Examples
Panels
Time spent on filterable-service queries:
...
Dashboards
Download and import the JSON file as a new dashboard by clicking the + icon and selecting "Import", then "Upload .json File".
View file | ||
---|---|---|
|
...