Introduction to Nightingale Single Sign-On (SSO) with DingTalk

Overview

DingTalk SSO allows users to log in securely to third-party applications or websites using DingTalk (an internal enterprise application) as the identity provider. By configuring DingTalk login in Nightingale, users can enjoy passwordless authentication.

Notes

If you have not yet activated a DingTalk Open Platform account, please visit
https://open-dev.dingtalk.com to register.

DingTalk Open Platform Configuration

Open DingTalk Open Platform: https://open-dev.dingtalk.com
On the homepage, record the CorpId
Click Application Development and create an internal enterprise application
After creating the application, record the AppKey and AppSecret
In the sharing settings, enter the callback domain name.
The callback domain is the redirect URL after successful DingTalk authentication.
This URL should be the callback address of the Nightingale monitoring.
In Permission Management, grant personal information permissions:
[ Contact.User.mobile, Contact.User.Read ]

Note: If the “User Details in Address Book” permission is not enabled, DingTalk users must manually add their email address.
See the process below:
In Permission Management, grant address book user details permissions:
[ fieldMobile, fieldEmail, qyapi_get_member ]
If the permission is not enabled, Nightingale will retrieve user info based only on personal permissions
(and you must set “User Info Status” to Off in the DingTalk SSO configuration).
Go to Version Management & Release, then publish the version