Configuring DingTalk Password-Free Login

Overview

This chapter describes the configuration process for users to log in to IDaaS integrated applications without a password within the DingTalk PC client and mobile APP. After configuring the integrated DingTalk authentication source on the IDaaS platform, refer to this module to configure password-free login for each application system in DingTalk.

Prerequisites

• Have access management permissions for the IDaaS Enterprise Center.
• Have administrator permissions for the DingTalk developer backend account and have already created an application.
• The application has been integrated on the IDaaS platform.
• The DingTalk authentication source has been configured on the IDaaS platform /guide/admin/auth_source/dingdingsource.html.

Configuration Process

Steps

The example application in this article is an OAuth protocol application created in IDaaS: OAUTH_1.

Configure DingTalk Authentication for the Application

1. Log in to the IDaaS Enterprise Center platform, select "Resources > Applications" in the top navigation bar. Taking an OAuth protocol application as an example, select "OAUTH_1", switch to the "Login Configuration" tab, scroll down to DingTalk, and enable the previously added DingTalk authentication source.

   

   Please remember the "View URL" address under the authentication source, as we will configure the application homepage address in the DingTalk open platform.

   Some pre-integrated applications do not support IdP-initiated single sign-on. Please ignore this step for applications such as Huawei Cloud and Tencent Cloud.

Configure in DingTalk Admin Backend

1. Log in to the DingTalk Developer Backend (opens new window), create a new "OAUTH_1" application, select "Basic Information > Development Management", and change the "Application Homepage Address" and "PC Homepage Address" to the URL saved in IDaaS when enabling the DingTalk authentication source for the application.

   

   For password-free login to applications like Huawei Cloud or Tencent Cloud, the application homepage address should be the login link of the identity provider created in the Huawei Cloud or Tencent Cloud console.

Verify Password-Free Login in DingTalk Client

1. The user logs into the DingTalk PC client, finds the application created in DingTalk, clicks on the application, and can then log into OAUTH_1 without a password.
2. The user logs into the DingTalk mobile APP, finds the application created in DingTalk, clicks on the application, and can then log into OAUTH_1 without a password.