What is OnlyOffice
OnlyOffice, stylized as ONLYOFFICE, is a free software office suite developed by Ascensio System SIA, a company headquartered in Riga, Latvia. It features online document editors, platform for document management, corporate communication, mail and project management tools
This is based on authentik 2021.10.4 and OnlyOffice 18.104.22.1682. Instructions may differ between versions.
The following placeholders will be used:
authentik.companyis the FQDN of authentik.
onlyoffice.companyis the FQDN of the OnlyOffice instance.
Open your OnlyOffice instance, navigate to the settings by clicking the cog-icon in the navbar, then click on Control Panel on the sidebar.
In the new tab, click on SSO in the sidebar.
Click the Enable Single Sign-on Authentication checkbox to enable SSO.
Scroll down to ONLYOFFICE SP Metadata, and copy the SP Entity ID (link to metadata XML) URL. Open this URL in a new tab, and download the XML file.
Create an application in authentik, and create a SAML Provider by using SAML Provider from Metadata. Give the provider a name, and upload the XML file you've downloaded in the previous step.
Edit the resulting Provider, and ensure Signing Certificate is set to any certificate.
Navigate on the Metadata tab on the Provider page, and click Copy download URL.
Navigate back to your OnlyOffice Control panel, and paste the URL into Load metadata from XML to fill the required fields automatically, and click the upload button next to the input field.
Under Attribute Mapping, set the following values
- First Name:
- Last Name:
Click save and a new SSO button will appear on the OnlyOffice login page.