Using OAuth as the Authentication Source for Digital Hive

Using OAuth as the Authentication Source for Digital Hive

Question

Can Digital Hive leverage OAuth as the authentication source so that existing users and groups can be used?

Answer

OAuth sources like Azure and Google can both be leveraged for Digital Hive authentication.

When using external third-party authentication sources, like OAuth, the very first user that logins in to Digital Hive will be the Super user. It is thus required that configuring Digital Hive integration with OAuth be done before anybody access the Digital Hive platform. If a user logs into Digital Hive BEFORE configuring the integration with OAuth, there will be no way to assign an OAuth user as the Super user and all OAuth users will end up being consumers with no access to the Control Center.
If this scenario arises, please reach out to Digital Hive Support either through the Helpdesk portal or via email at support@digitalhive.com.


  1. Through the Windows Services interface, stop the DigitalHive-node1 service
  2. Using the File Explorer, navigate to the <digitalhive_install_location>\app\node1\tomcat\bin directory
  3. Right click on the tomcat9w file
  4. Select Create shortcut
  5. Drag the newly created tomcat9w - Shortcut to the Windows Desktop
  6. Right click on tomcat9w - Shortcut
  7. Select Properties
  8. On the Shortcut tab, append //ES//DigitalHive-node1 to the current Target value ensuring that there is a space between the current value and the appended string 
  9. Click OK
  10. Double click the tomcat9w - Shortcut file
  11. Click Yes
  12. Select the Java tab
  13. In the Java Options, append -Dspring.profiles.active=oauth_auth to the bottom of the list
  14.  
  15. Click OK
  16. Using the File Explorer, navigate to the <digitalhive_install_location>\app\node1\tomcat\conf directory
  17. In Microsoft Azure, an OAuth App registration will have been created so get the AppID, app secret, and tenant ID
  18. Edit the theia.properties file and add the following parameters: 
            spring.security.oauth2.client.registration.azure.client-id=<value> 
            spring.security.oauth2.client.registration.azure.client-secret=<value>
            azure.activedirectory.tenant-id=<value> 


In Windows Services, start the DigitalHive-node1 service. When Digital Hive has started, launch Digital Hive and you will be prompted to login using OAuth.
    • Related Articles

    • Using Active Directory as the Authentication Source for Digital Hive

      Question Can Digital Hive leverage Active Directory as the authentication source so that existing AD users and groups can be used? Answer Digital Hive can be configured to use Active Directory authentication as long as the Digital Hive server is ...
    • Using SAML as the Authentication Source for Digital Hive

      Question Can Digital Hive leverage SAML as the authentication source so that existing an SAML provider can be used? Answer Digital Hive, both Windows and Linux, can be configured to use SAML authentication. It is highly recommended that SAML ...
    • Digital Hive Architecture Overview

      Overview Digital Hive is a lightweight, web-based application that is both easy to install as well as to maintain and manage. Other than the Microsoft C++ redistributable (https://www.microsoft.com/en-ca/download/details.aspx?id=40784), there are no ...
    • Digital Hive Auditing Explained

      Question The Digital Hive Control Center doesn't seem to provide any reports or views around usage of the platform. Is there a way to create reports to show metrics like the amount of reports executed by platform, the number of searches being made, ...
    • Digital Hive Frequently Asked Questions (FAQ)

      Installation Can Digital Hive be installed on premise or in the Cloud? Digital Hive can be installed using either on-premise hardware, in a Private Cloud, or a hybrid architecture that leverages both Cloud and on-premise. There is currently no ...