Boundary

In this guide, we will integrate Ironchip with Boundary to add a layer of security by using Ironchip's passwordless login. ## Requirements - Have a deployed Boundary - Have access to the Ironchip panel

Boundary

Go to Authentication Methods.

Create a new method using OIDC.

Give it an identifying name and enter something random in Client ID and Client Secret so it lets you save, we will modify it later.

In the API URL Prefix section, enter the access address to Boundary. Upon saving, it will return a URL that we will use in Ironchip.

On the Ironchip panel, create a new OIDC application and write down the URL obtained.

  • Download the document with the necessary IDs.
  • Add the users you want to the application.

Back in Boundary, enter this data in the corresponding fields.

And finally, add the following fields to their corresponding place. (See image)

Common errors

  1. The docker machine is unable to resolve the domain ironchip.com, add it to the /etc/hosts file of the domain resolution machine.
  2. When checking the issuer, **https://idp.ironchip.com/oidc/** appears and an error occurs, remove the / at the end to correct it.

Verification

To verify its operation, simply log out and log back in with the Ironchip option.

Enter the credentials of the user added to the Ironchip application, and authorize through the mobile or desktop app notification.

If you want to, add these credentials to the Boundary administrator to have permissions with this user.

Video