IDE Services On-Prem LDAP with Hub On-Prem

This article covers the HTTP based integration with both IDE Services, Hub and LDAP server running udner the same docker cluster, in case your applications are running on HTTPS, please refer to the official documentation: https://www.jetbrains.com/help/hub/ldap-authentication-module.html

1. After Hub is started go to Auth Modules page and create a new LDAP authentication module.
2. Define module name, provide Server URL and it's port (389 in case of non-SSL connection). Write down the search base:

3. Once LDAP auth module is created verify the settings on <hub_url>/hub/authmodules/<ldap_module_name> page.

4. In IDE Services application.yaml file define the tbe.auth module and point it to the hub server:

tbe:
  auth:
      login-url: "http://localhost:8080/hub/api/rest/oauth2/auth"
      token-url: "http://hub:8080/hub/api/rest/oauth2/token"
      jwt-certs-url: "http://hub:8080/hub/api/rest/oauth2/keys"
      client-id: "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
      client-secret: "<secret_value>"
      required-scopes: [ "profile", "email", "openid", "offline_access"]
      root-admin-emails:
       "admin@example.com"

5. Go to <hub_url>/hub/services and create a Service for IDE Services application. Define it's name and provide it's public URL.

6. On IDE Services Service settings page set Redurect URls parameter to <tbe.deployment.url>/api/login/authenticated and click Save button.

7. You are good to go now, try to login to your IDE Services instance using credentials from your LDAP server.