auth-providers

Diagnose and configure OrangeHRM authentication, including LDAP, OAuth2, and OpenID Connect.

1.1k|746|Updated Jan 5, 2017
One-click install
npx skills add https://github.com/orangehrm/orangehrm --skill auth-providers
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: auth-providers
Source: https://github.com/orangehrm/orangehrm/tree/main/.agents/skills/auth-providers
Command: npx skills add https://github.com/orangehrm/orangehrm --skill auth-providers

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill eliminates the guesswork of managing OrangeHRM's pluggable authentication system, debugging login failures, and configuring identity provider integrations, saving admins and developers hours of sifting through scattered code and documentation.

Core Features & Use Cases

  • Pluggable Auth Provider Chain: Add, configure, and prioritize custom authentication providers (Local, LDAP, OIDC, SAML) for OrangeHRM user logins.
  • Login Troubleshooting: Diagnose "invalid credentials" errors, LDAP sync failures, OAuth client rejection, and missing SSO login buttons with targeted checklists.
  • Integration Setup: Configure LDAP directory user sync, register OAuth2 clients for third-party API access, and set up Google/Microsoft OpenID Connect SSO. For example, an admin can use this Skill to resolve a scenario where newly synced LDAP users are unable to log in, or roll out a new SAML SSO provider for company-wide employee access.

Quick Start

Use the auth-providers skill to diagnose why a user is receiving an "invalid credentials" error when attempting to log in with their LDAP account.

Frequently Asked Questions about auth-providers

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure LDAP directory sync for OrangeHRM user logins?

To configure LDAP directory sync for OrangeHRM, you add and prioritize an LDAP authentication provider in the pluggable auth provider chain, enabling directory user synchronization and credential validation.

Why does an OrangeHRM LDAP account show invalid credentials during login?

An OrangeHRM LDAP account shows invalid credentials during login due to LDAP sync failures or misconfigured auth provider chain priorities. You can diagnose this using targeted login troubleshooting checklists for credential validation errors.

How do I set up Google or Microsoft OpenID Connect SSO in OrangeHRM?

To set up Google or Microsoft OpenID Connect SSO in OrangeHRM, you configure an OIDC authentication provider within the auth chain, integrating third-party identity providers for company-wide employee access.

Can I register OAuth2 API clients for third-party access in OrangeHRM?

Yes, you can register OAuth2 API clients in OrangeHRM to enable third-party API access. This involves configuring OAuth2 integration settings within the pluggable authentication system.

How do priority-based auth provider chains work for OrangeHRM logins?

Priority-based auth provider chains in OrangeHRM work by sequentially evaluating configured authentication providers like Local, LDAP, OIDC, and SAML, determining the validation order for user logins.

What is the best way to resolve missing SSO login buttons in OrangeHRM?

The best way to resolve missing SSO login buttons in OrangeHRM is to verify your OpenID Connect or SAML provider integration settings. Use targeted login troubleshooting checklists to diagnose the configuration.