Configuring Authentication
See how to download example files from the helm chart here.
Overview
The chart components authentication is managed by the top-level key authentication
.
The configuration is similar if you use standalone Synapse (legacy authentication) or if you enable Matrix Authentication Service.
You can find configurations examples in charts/matrix-stack/ci/fragments/authentication-secrets-externally.yaml
and charts/matrix-stack/ci/fragments/authentication-secrets-in-helm.yaml
.
Registration and Password Authentication
The charts come with :
- registration disabled by default
- password authentication enabled by default
To change this default behaviour, you will have to configure it through the synapse.additional
or matrixAuthenticationService.additional
key. See Synapse documentation or Matrix Authentication Service documentation for more details.
Configuring OIDC
You can configure a list of OIDC providers to use in the chart. Please refer to the description of the authentication.oidc
key in the values file for details.
Configuring LDAP
You can configure a list of LDAP providers to use in the chart. Please refer to the description of the authentication.ldap
key in the values file for details.
If LDAP is configured, and Advanced Identity Management is enabled, it will use the first LDAP provider configured in the list as the source of its users.