/teamcity-azure-active-directory

TeamCity plugin which supports authentication via Microsoft Azure Active Directory

Primary LanguageJavaApache License 2.0Apache-2.0

TeamCity plugin which supports authentication via Microsoft Azure Active Directory.

Plugin compatible with TeamCity server 8.1+, 9.0+

Installation

Download latest plugin version and install it as ususal

Configuration

Configuring Azure Active Directory

Register your TeamCity server as an application in your Azure Active Directory.

Set 'SIGN-ON URL' to {TEAMCITY_URL}/login.html

Add 'REPLY URL' {TEAMCITY_URL}/overview.html

Also please check for 'CLIENT ID', 'OAUTH 2.0 AUTHORIZATION ENDPOINT' in 'App Endpoints' section.

Configuring TeamCity server

Add 'Microsoft Azure Active Directory' HTTP authentication module to your authentication configuration.

Specify valid 'App OAuth 2.0 authorization endpoint' and 'Client ID' retrieved from Azure Portal.

Use 'Log in using Azure Active Directory' link available on Login page to login via your Azure Active Directory account.

How it works?

This authentication scheme works as following:

  • it receives UID, email, username of AD user from specified AD
  • looks for already added TeamCity user for received UID, if found authenticate this TeamCity user
  • if allowed by scheme options tries find TeamCity user by given e-mail
  • if user is not found and user creation is allowed, new TeamCity user is created, some user like email are setted for newly created TeamCity user

Plugin development

Building plugin from sources

Issue 'mvn package' command from the root project to build your plugin. Resulting package .zip will be placed in 'target' directory.

To install the plugin, put zip archive to 'plugins' dir under TeamCity data directory and restart the server.

Build on public CI server

Feedback

Please submit your questions/bugs/feature requests here

This is not a bundled plugin, please do not use TeamCity official feedback channels to provide feedback for this plugin.