<%
# Copyright (C) 2011 - present Instructure, Inc.
#
# This file is part of Canvas.
#
# Canvas is free software: you can redistribute it and/or modify it under
# the terms of the GNU Affero General Public License as published by the Free
# Software Foundation, version 3 of the License.
#
# Canvas is distributed in the hope that it will be useful, but WITHOUT ANY
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
# A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
# details.
#
# You should have received a copy of the GNU Affero General Public License along
# with this program. If not, see .
%>
<% add_crumb t(:page_title, "Authentication Settings") %>
<% set_active_tab "authentication" %>
<%- css_bundle(:federated_attributes) %>
<% provide :page_title do %>
<%= t(:page_title, "Authentication Settings")%>
<% end %>
<% provide :right_side do %>
<% if @presenter.ldap_config? %>
<% end %>
<% if @presenter.auth? %>
<%= link_to(account_remove_all_authentication_providers_url(@account),
data: { confirm: t(:delete_auth_confirmation,
'Are you sure? Users may not be able to log in if this is removed.') },
method: :delete,
class: "delete_auth_link Button Button--danger icon-trash button-sidebar-wide") do %>
<%= t(:delete_auth_link, "Remove Authentication") %>
<% end %>
<% end %>
<%= t(:settings_title, "Authentication Settings") %>
<%= t(:settings_description, 'In order for a user to authenticate through an external identity provider (IdP),
the user must have a login identifier that is both linked to this account and
that matches the unique identifier returned by the IdP. To see a user\'s current
logins, see the "Login Information" section on the user\'s profile page. (Found
by searching for the user on the "Users" tab.)') %>
<%= mt(:profile_page_link_example,
'For example, here is your profile page: [%{friendlyname}](%{url})',
friendlyname: @current_user.last_name_first_or_unnamed,
url: context_url(@account, :context_user_url, @current_user)) %>
<% if @presenter.ips_configured? %>
<%= t(:ip_address_list_description,
"If you are using an authentication service that requires the Canvas "\
"servers to contact your servers directly, such as LDAP, you'll need "\
"to make sure that your servers can accept connections from these "\
"IP addresses:") %>
<%= @presenter.ip_list %>
<% end %>
<%= render partial: 'sso_settings_form',
locals: { presenter: @presenter, account: @account }%>
<%= t("Current Provider") %>
<% if @presenter.configs.empty? %>
<%= t(:no_auth_type_description, "This account does not currently integrate "\
"with an identity provider.") %>
<% else %>
<% @presenter.configs.each do |aac| %>
<%= render partial: "aac_settings",
locals: { aac: aac, presenter: @presenter, account: @account } %>
<% end %>
<% end %>
<% @presenter.new_auth_types.each do |auth_type| %>
<%= render partial: "aac_settings",
locals: {
account: @account,
presenter: @presenter,
aac: @presenter.new_config(auth_type.sti_name)
} %>
<% end %>
<% if @presenter.ldap_configs.size > 0 %>
<%= render partial: 'ldap_settings_test',
locals: { account: @account, presenter: @presenter } %>
<% end %>
<% js_bundle :authentication_providers %>