Charmed Hook Service for the Canonical Identity Platform

Description

Python Operator for the Canonical Identity Platform Hook Service

Usage

Deploy the charms:

juju deploy hook-service --trust
juju deploy identity-platform --trust

You can follow the deployment status with watch -c juju status --color.

Configuration

Now that we have deployed our charms, we will need to configure the charm.

First we need to create a juju secret with the consumer id/secret:

juju add-secret salesforce-consumer consumer-key=<consumer_key> consumer-secret=<consumer_secret>

Now we need to grant access to the secret to the charm:

juju grant-secret salesforce-consumer hook-service

Then you will have to configure the charm, eg:

juju config hook-service \
  salesforce_domain=https://canonicalhr--staging.sandbox.my.salesforce.com \
  salesforce_consumer_secret=salesforce-consumer

Now you can integrate the charm with the identity-platform:

juju integrate hook-service:hydra-token-hook hydra

Once the charms reach an active state, any users that try to log in to the identity-platform will have groups in their access tokens pulled from salesforce.

Security

Please see SECURITY.md for guidelines on reporting security issues.

Contributing

Please see the Juju SDK docs for guidelines on enhancements to this charm following best practice guidelines, and CONTRIBUTING.md for developer guidance.

License

The Charmed Hook Service is free software, distributed under the Apache Software License, version 2.0. See LICENSE for more information.