# ITSM NG

## Presentation

ITSM-NG is a fork of GLPI. The software’s main features are: assets management, IT inventory, service desk, dashboards, KB…

ITSM-NG is compatible with OpenID Connect protocol.

## OpenID Connect

### Configuring ITSM-NG

The configuration steps are described on ITSM-NG wiki.

Just set LemonLDAP::NG main portail URL in `Provider` field, and define `Client ID` and `Client Secret`.

### Configuring LemonLDAP::NG

If not done yet, configure LemonLDAP::NG as an OpenID Connect service.

Then add ITSM-NG as a new OpenID Connect Relying Party using the following parameters:

- Client ID: the same you set in ITSM-NG configuration

- Client Secret: the same you set in ITSM-NG configuration

- Add the following exported attributes:

    - given_name: user’s givenName attribute

    - family_name: user’s sn attribute

    - email: user’s mail attribute

- Login and Logout Redirect URIs: The main URL of ITSM-NG instance

Configuration sample using CLI:

    $ /usr/libexec/lemonldap-ng/bin/lemonldap-ng-cli -yes 1 \
        addKey \
          oidcRPMetaDataExportedVars/itsmng given_name givenName \
          oidcRPMetaDataExportedVars/itsmng family_name sn \
          oidcRPMetaDataExportedVars/itsmng email mail \
          oidcRPMetaDataOptions/itsmng oidcRPMetaDataOptionsClientID myClientId \
          oidcRPMetaDataOptions/itsmng oidcRPMetaDataOptionsClientSecret myClientSecret \
          oidcRPMetaDataOptions/itsmng oidcRPMetaDataOptionsRedirectUris 'https://itsmng.example.com'  \
          oidcRPMetaDataOptions/itsmng oidcRPMetaDataOptionsPostLogoutRedirectUris 'https://itsmng.example.com' \
          oidcRPMetaDataOptions/itsmng oidcRPMetaDataOptionsIDTokenSignAlg RS512 \
          oidcRPMetaDataOptions/itsmng oidcRPMetaDataOptionsIDTokenExpiration 3600 \
          oidcRPMetaDataOptions/itsmng oidcRPMetaDataOptionsAccessTokenExpiration 3600 \
          oidcRPMetaDataOptions/itsmng oidcRPMetaDataOptionsBypassConsent 1

Tip

Declare all attributes that you need to map in ITSM-NG configuration. These attributes must be returned by the scopes requested by ITSM-NG.