Skip to content

Configuring Advanced Identity and Access Management

See how to download example files from the helm chart here.

Configuration

For a quick setup using the default settings, see the minimal fragment from charts/matrix-stack/ci/fragments/advanced-identity-management-minimal.yaml.

Configuring a PostgreSQL database

If you want to configure advancedIdentityManagement.postgres database manually, see the following fragments:

  • charts/matrix-stack/ci/fragments/advanced-identity-management-postgres.yaml
  • charts/matrix-stack/ci/fragments/advanced-identity-management-postgres-secrets-in-helm.yaml or charts/matrix-stack/ci/fragments/advanced-identity-management-postgres-secrets-externally.yaml

Edit the values accordingly.

Configuring with SCIM bridging

To use Advanced Identity and Access Management SCIM bridging, it is required to prepare the advancedIdentityManagement.scim section. You can use the example from charts/matrix-stack/ci/fragments/advanced-identity-management-scim.yaml. Additionally, it is required either:

  • To configure an Advanced Identity and Access Management Ingress. You can use the example from charts/matrix-stack/ci/fragments/advanced-identity-management-ingress.yaml. The SCIM endpoint will be available at the root of Advanced Identity and Access Management hostname.
  • To use existing Synapse ingress. If Synapse and Advanced Identity and Access Management are deployed in the same chart release, a path /scim/v2 will be available at the root of Synapse Ingress.

Configuring Advanced Identity and Access Management synchronization

If LDAP is configured under authentication.ldap, Advanced Identity and Access Management will use the 1st provider of the list as its own LDAP source provider.

If you want to configure the LDAP provider manually, you can configure it using advancedIdentityManagement.additional property. See Advanced Identity and Access Management Overview to see how you can configure it.