Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-64512

Enabling Azure Active Directory Matrix-based security prevents configurations from being edited

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Fixed
    • Component/s: _unsorted
    • Labels:
      None
    • Environment:
    • Similar Issues:

      Description

      Attempting to enable Azure Active Directory Matrix-based security prevents configurations from being modifiable. This is a problem for those that only want specific people in an Azure AD from accessing the Jenkins server.

      To reproduce this problem do the following:

      • Install Jenkins
      • Setup a reverse proxy with HTTPS
      • Install Azure AD plugin
      • Enable Azure Active Directory Authentication
      • Enable Azure Active Directory Matrix-based security to try to further restrict allowed users.
      • Apply/Save. You should get an access denied since you were authenticated via Jenkin's database.
      • Log back in with your Azure credentials
      • Create a new item of any kind
      • Try to Apply/Save a configuration.

      If you repeat all the steps correctly, you'll end not seeing a green confirmation banner nor be redirected when clicking save.

      Upon opening a configuration while having the Inspect window opened, the errors in the attached files appear

        Attachments

          Activity

          josephwoolf Joseph created issue -
          josephwoolf Joseph made changes -
          Field Original Value New Value
          Resolution Fixed [ 1 ]
          Status Open [ 1 ] Closed [ 6 ]
          ircbot Jenkins IRC Bot made changes -
          Component/s _unsorted [ 19622 ]
          Component/s azure-ad-plugin [ 23231 ]

            People

            Assignee:
            azure_devops Azure DevOps
            Reporter:
            josephwoolf Joseph
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: