How to provision and authenticate GLPI users with Azure AD using SCIM and Oauth SSO

In the fast-paced world of technology, managing user identities across multiple platforms can be a daunting task. Imagine a typical day at work, where you’re juggling access to a myriad of systems – from email and intranet to various tools like GLPI, ERP, and CRM. Each time your role changes, or you update your profile – or some other user’s does on theirs – someone from the IT department is burdened with the tedious task of manually updating these details in every system. Not to mention the need of managing multiple passwords for the vast diversity of systems you use on a daily basis. This method is not only time-consuming but also riddled with potential errors.

Now, think of SCIM – or System for Cross-domain Identity Management – as a versatile “translator”, a proactive “messenger”, or an efficient “negotiator” in the digital realm, that streamlines communication between different systems. Instead of someone having to manually go to each system to update your information, SCIM automates this process. When there’s a change in a user’s information, SCIM automatically spreads these updates to all connected systems.

So, SCIM helps companies to efficiently manage user identity information across various systems, saving time, reducing errors, and enhancing security. It’s like having an assistant ensuring that all your information is consistent everywhere, without the need for constant manual intervention.

 

The SCIM Plugin is different from OAuth

It’s common to mistake OAuth capabilities for data synchronization, especially in GLPI instances and User and Groups Directories. While OAuth does provide centralized and secure access permissions, SCIM and OAuth serve distinct purposes, despite their apparent similarities.

Both plugins, when integrated with other credential systems, facilitate access without risking exposure to LDAP infrastructures or complex VPN setups — a critical advantage, mainly for GLPI Cloud Network users connected to Azure Active Directory (Microsoft Entra ID).

SCIM plugin simplifies the management of user information, and depending on the provider, also credentials. Attributes like name, email, roles, and contact information are part of its scope of management and synchronization. It standardizes the way identity information is exchanged between identity providers and service providers without excessive exposition of applications and using secured and trackable API channels between services.

One great use case is to have users using their Azure Active Directory (Microsoft Entra ID) information on a GLPI instance. In addition to OAuthSSO plugin, the credentials are also the same — and the users don’t need to authenticate again if they are already connected to their browsers.

For GLPI Cloud Network customers and those with a GLPI Network Basic (or higher) subscription in an on-premises environment, these plugins offer an unprecedented level of convenience and security in identity management.

Useful links

SCIM plugin for GLPI

How to set up the SCIM plugin with Azure Portal

How to set up the SCIM plugin with Okta

OAuthSSO Plugin for GLPI

How to set up the OAuth plugin to log in to GLPI using Microsoft 365 credentials

New Platinum Partner in France: INFOTEL

We would like to share with you that our partner INFOTEL in France is now a PLATINUM partner!

GLPI Expert Company since 2006, Infotel has a savoir-faire on all phases of a project.
We provide IT system audits, consulting and expertise, setup and integration of software and solutions. Infotel also offers specific plugin development, training and technical support.

Website: https://bit.ly/3Y7SELW

We are excited that GLPI ITSM solution is becoming more and more represented all over the world and GLPI Network (our support offer for on-premises – get your IT Infrastructure secured) subscription service will be available for more customers through our new partners.

Our large partnership network is always open for new collaborations. If you are interested in representing one of our products in your country, get in touch with us: https://glpi-project.org/contact_us/

Being a partner means:

  • Having an a direct access to the Teclib´s tech expertise;
  • Get special discounts;
  • Access official support,
  • Obtaining many other tools which will help you to gain more customers and increase reputation on the market by adding open source ITSM to your portfolio.

Discover all benefits of being a partner here: https://glpi-project.org/partners/

Elevate Your GLPI Experience with the Branding Plugin: A complete guide on how to change GLPI Logos

https://services.glpi-network.com/documentation/1565/file/README.md

If you’ve ever wanted to give your GLPI instance a unique touch by incorporating your logo and customizing the login page, you’re in for a treat. In this blog post and accompanying video tutorial, let’s walk through the first steps of using the Branding Plugin to elevate your GLPI experience — and your client’s too.

The Branding Plugin for GLPI is a powerful tool designed to enhance the visual appeal of your GLPI instance. It allows you to replace default logos with your own and create a more personalized login page without the need of copying and pasting files directly into the server’s folders.

This not only makes your GLPI instance visually distinctive, but also reinforces your organization’s brand identity.

ℹ️ The ‘Branding’ plugin is available for all the Basic GLPI Network subscribers and for all GLPI Network Cloud customers.

How to install the Branding Plugin

If you are, at least, a Basic GLPI Network Subscriber or a GLPI Cloud Network administrator, you can find the plugin named Branding on the Marketplace of your instance.

✅ The plugin is available for all Basic or above GLPI Network Subscribers and for all GLPI Network Cloud clients.

Step 1: In Setup > Plugins > Marketplace, search for Branding after choosing the Discover tab.

Step 2: Install and enable it.

Step 3: Click on the tool icon below the Uninstall button or navigate through Administration > Entities > Root entity and look for the Branding tab

How to change GLPI login and top left logos

Step 4: Choose the files you want to replace the current ones.

  • Top Left corner logo – This can be changed according to the desired entity 
    • Default size: 100×55 pixels
    • It is the logo you see when your GLPI page is opened and the left sidebar is expanded.
  • Lop Left corner logo (collapsed sidebar) – This can be changed according to the desired entity
    • Default size 40×40 pixels
    • It is the logo you see when your GLPI page is opened and the left sidebar is collapsed.
  • Favicon
    • Default size: 16×16 or 32×32 pixels
    • It is the logo you see next to the page title at the beginning of your browser’s the tab.
  • Login page logo
    • Default size: 220×130 pixels
    • It is the logo you see before you log in. It appears with the fields to fill with your username and password
  • Login page background
    • Default size: It depends on the usual size of your screens. The bigger, the better. (Make sure not to surpass the maximum upload limit for files.
    • It is the image you can add as a background at the login page.

Getting Started

Getting started with “Branding” is easy. You’ll find detailed documentation here: Plugin Documentation. Plus, you can explore this plugin in action on your GLPI Network Cloud demo instance.

This plugin is available via our professional offers ! From the level “Basic” in GLPI Network Subscriptions (on-premise), and to all of our GLPI Network Cloud customers.

Subscription and More Information

Find all the details about our subscription offers in this brochure: Subscription Brochure. For more information on GLPI Network Cloud, visit our site.

Join the Community

This plugin isn’t just a tool; it’s a community effort. We invite you to test it, provide feedback, and help us refine it to better serve your needs.

Stay connected, stay informed, and elevate your work experience with the “Branding” plugin. We’re here to make sure you’re always in the loop, no matter where your work takes you.

Video content

00:00 Intro

00:31 Installing the ‘Branding’ Plugin

01:23 Setting up the ‘Branding’ Plugin

03:47 How to set up a different branding to different entities

GLPI E-Report 2023 is here!

The year 2023 is coming to a close! This year has been marked by numerous exciting developments for Teclib’ and GLPI, and we’re thrilled to share the highlights with you.

Every year, we offer you a recap of GLPI. Our E-Report 2023 is now available, and you can download it today.

download glpi e-report

What will you find in this Annual Report?

  • Celebration of GLPI’s 20th anniversary;
  • Overview of GLPI 2023: global partnerships, new users, downloads, cloud instances, new plugins;
  • Users about GLPI (discover what they appreciate!);
  • Recap of GLPI Partners Day 2023.

Where to download? 

You can download it for free here: https://bit.ly/4axlI6Z.

A big thank you to everyone for your contribution!

New exclusive plugin: Unread Messages

We would like to announce a new plugin — Unread — available to all GLPI Network Cloud customers and via our professional offers starting on the Basic GLPI Network Subscription (on-premises) and above !

This plugin helps you to keep track of unread messages while you were offline and don’t want to miss ant messages that could have be sent, and you should be aware of.

Notification bell

The plugin adds a new notification bell in the top right corner so you can keep track of everything you need to. This notification bell list all your unread messages.

screenshot main plugin unread

Timeline indicator

The timeline indicator adds a line below the last item you have read on THE tickets’ timeline. So now it’s possible to come back to work knowing exactly where you stopped before.

screenshot timeline plugin unread

List indicator

When you open the ticket list, all the tickets with unread messages are highlighted, and you can choose the one you want to know more about.

screenshot search plugin unread

Find the subscription brochure here: https://glpi-project.org/wp-content/uploads/EN.pdf

On GLPI Network Cloud: https://glpi-network.cloud/

Documentation for this plugin can be found by clicking this link: https://plugins.glpi-project.org/#/plugin/unread

You can test this plugin (and all other GLPI Network plugins) on your GLPI Network Cloud demo instance.