Yadda ake Sanya Hailbytes VPN Tantance kalmar sirri
Gabatarwa
Yanzu da kuna da saitin HailBytes VPN kuma an daidaita ku, zaku iya fara bincika wasu abubuwan tsaro da HailBytes zai bayar. Kuna iya duba shafinmu don umarnin saitin da fasali don VPN. A cikin wannan labarin, za mu rufe hanyoyin tantancewa da HailBytes VPN ke goyan bayan da yadda ake ƙara hanyar tantancewa.
Overview
HailBytes VPN yana ba da hanyoyin tantancewa da yawa baya ga ingantaccen gida na gargajiya. Don rage haɗarin tsaro, muna ba da shawarar murkushe amincin gida. Madadin haka, muna ba da shawarar tabbatar da abubuwa masu yawa (MFA), Haɗin OpenID, ko SAML 2.0.
- MFA yana ƙara ƙarin ƙarin tsaro a saman amincin gida. HailBytes VPN ya ƙunshi nau'ikan ginanniyar gida da goyan bayan MFA na waje don shahararrun masu ba da shaida kamar Okta, Azure AD, da Onelogin.
- OpenID Connect wani yanki ne na ainihi wanda aka gina akan ka'idar OAuth 2.0. Yana ba da amintacciyar hanya madaidaiciya don tantancewa da samun bayanan mai amfani daga mai ba da shaida ba tare da shiga sau da yawa ba.
- SAML 2.0 buɗaɗɗen ma'auni ne na tushen XML don musayar tabbaci da bayanin izini tsakanin ɓangarori. Yana ba masu amfani damar tantancewa sau ɗaya tare da mai ba da shaida ba tare da sake tabbatarwa don samun damar aikace-aikace daban-daban ba.
Buɗe ID Haɗin tare da Saitin Azure
A cikin wannan sashe, za mu ɗan yi bayani game da yadda ake haɗa mai ba da shaidar ku ta amfani da Tabbatar da Multi-Factor OIDC. Wannan jagorar an tsara shi ne don amfani da Azure Active Directory. Masu ba da shaida daban-daban na iya samun ƙayyadaddun saiti da sauran batutuwa.
- Muna ba da shawarar ku yi amfani da ɗaya daga cikin masu samar da cikakken tallafi kuma an gwada su: Azure Active Directory, Okta, Onelogin, Keycloak, Auth0, da Google Workspace.
- Idan ba kwa amfani da mai bada OIDC da aka ba da shawarar, ana buƙatar saiti masu zuwa.
a) discovery_document_uri: OpenID Connect na'ura mai ba da hanya tsakanin hanyoyin sadarwa URI wanda ke dawo da takaddun JSON da aka yi amfani da shi don gina buƙatun na gaba ga wannan mai bada OIDC. Wasu masu samarwa suna kallon wannan a matsayin "sanannen URL".
b) client_id: ID ɗin abokin ciniki na aikace-aikacen.
c) client_secret: Sirrin abokin ciniki na aikace-aikacen.
d) redirect_uri: Yana umurtar mai bada OIDC inda za'a tura bayan tantancewa. Wannan yakamata ya zama Firezone EXTERNAL_URL + /auth/oidc/ /callback/, misali https://firezone.example.com/auth/oidc/google/callback/.
e) amsa_type: Saita zuwa lamba.
f) iyaka: OIDC iyakoki don samuwa daga mai ba da OIDC na ku. Aƙalla, Firezone yana buƙatar buɗewa da iyakokin imel.
g) lakabin: Rubutun alamar maɓallin da aka nuna akan shafin shiga tashar tashar Firezone.
- Kewaya zuwa Azure Active Directory shafi akan tashar Azure. Zaɓi hanyar haɗin rajistar App a ƙarƙashin Sarrafa menu, danna Sabuwar Rajista, kuma yi rajista bayan shigar da masu zuwa:
a) Suna: Firezone
b) Nau'o'in asusu masu goyan baya: (Tsoffin Littattafai kawai - Mai haya guda ɗaya)
c) Juya URI: Wannan yakamata ya zama Firezone EXTERNAL_URL + /auth/oidc/ /callback/, misali https://firezone.example.com/auth/oidc/azure/callback/.
- Bayan yin rijista, buɗe cikakkun bayanai game da aikace-aikacen kuma kwafi ID ɗin Aikace-aikacen (abokin ciniki). Wannan zai zama ƙimar abokin ciniki_id.
- Bude menu na ƙarshen don dawo da daftarin bayanan metadata na OpenID Connect. Wannan zai zama ƙimar discovery_document_uri.
- Zaɓi hanyar haɗin Takaddun shaida & asirin ƙarƙashin Sarrafa menu kuma ƙirƙirar sabon sirrin abokin ciniki. Kwafi sirrin abokin ciniki. Wannan zai zama ƙimar sirrin abokin ciniki.
- Zaɓi hanyar haɗin izini na API a ƙarƙashin Sarrafa menu, danna Ƙara izini, kuma zaɓi Microsoft Graph. Ƙara imel, buɗewa, offline_access da bayanin martaba zuwa izini da ake buƙata.
- Kewaya zuwa / saituna / shafin tsaro a cikin tashar gudanarwa, danna "Ƙara Mai Ba da Haɗin Buɗe ID" kuma shigar da bayanan da kuka samu a cikin matakan da ke sama.
- Kunna ko kashe zaɓin ƙirƙirar masu amfani ta atomatik don ƙirƙirar mara amfani ta atomatik lokacin shiga ta wannan hanyar tantancewa.
Taya murna! Ya kamata ku ga Alamar Shiga tare da maɓallin Azure akan shafin shiga ku.
Kammalawa
HailBytes VPN yana ba da hanyoyin tantancewa iri-iri, gami da tantance abubuwa da yawa, OpenID Connect, da SAML 2.0. Ta hanyar haɗa OpenID Connect tare da Azure Active Directory kamar yadda aka nuna a cikin labarin, ma'aikatan ku na iya dacewa da samun damar albarkatun ku akan Cloud ko AWS.
