Configuring Grafana OIDC authentication with smart tokens in k8s

Monitoring and Observability Grafana
1

Hi, I’ve Grafana v. 10.2.1 deployed in k8s via helm chart. I’ve configured oidc authentication for grafana using dex proxy, now I need to configure authentication via smart token (which stores my ssl certificate). Any ideas how to achieve that?

2

Does Grafana support login via ssl certificate?

3

OAuth, LDAP, JWT, Basic auth, Auth Proxy, Magic link, and anonymous access.

You need a proxy or an IdP to handle the authentication for Grafana

4

Currently it is configured to use dex and Freeipa for authentication, so login via ldap user works fine. My problem is how to log in to Grafana using ssl certificate, instead of providing your ldap user/pass /

5

You need a proxy on an IdP to handle that

6

I have proxy to IdP which handles authentication for Grafana, it works fine. I’m trying to figure out how to change Grafana config so that it ask you to provide certificate?

7

Or this is also must be done on the proxy side?

8

Grafana doesn’t do certificate authentication

9

It supports:
• OAuth
• LDAP
• JWT
• Basic auth
• Auth Proxy
• Magic link
• and anonymous access (no auth)

10

So you need to extend the logic with an auth proxy