Overview
DingTalk SSO allows users to log in securely to third-party applications or websites using DingTalk (an internal enterprise application) as the identity provider. By configuring DingTalk login in Nightingale, users can enjoy passwordless authentication.
Notes
If you have not yet activated a DingTalk Open Platform account, please visit
https://open-dev.dingtalk.com to register.
DingTalk Open Platform Configuration
-
Open DingTalk Open Platform: https://open-dev.dingtalk.com
-
On the homepage, record the CorpId
-
Click Application Development and create an internal enterprise application
-
After creating the application, record the AppKey and AppSecret
-
In the sharing settings, enter the callback domain name.
The callback domain is the redirect URL after successful DingTalk authentication.
This URL should be the callback address of the Nightingale monitoring service.
-
In Permission Management, grant personal information permissions:
[ Contact.User.mobile, Contact.User.Read ]
Note: If the “User Details in Address Book” permission is not enabled, DingTalk users must manually add their email address.
See the process below:
-
In Permission Management, grant address book user details permissions:
[ fieldMobile, fieldEmail, qyapi_get_member ]
If the permission is not enabled, Nightingale will retrieve user info based only on personal permissions
(and you must set “User Info Status” to Off in the DingTalk SSO configuration).
-
Go to Version Management & Release, then publish the version
Configure DingTalk SSO in Nightingale
- Log in to Nightingale, then configure DingTalk authentication under
System Settings → Single Sign-On
| Nightingale Setting | DingTalk Information |
|---|---|
| Organization ID | CorpId |
| Client ID | Client ID |
| Client Secret | Client Secret |
| User Details | DingTalk Address Book User Info |
Account Login
