Re: Add modern authentication (OAuth 2.0 + OIDC) to TortoiseSVN

--000000000000661653061544d934
Content-Type: text/plain; charset="UTF-8"

Hello,

If you're looking to use Azure Application Proxy to authenticate to
VisualSVN Server with Azure AD credentials, there is another option you
might find helpful: *Microsoft Entra Kerberos* authentication. This option
doesn't depend on Azure Application Proxy.

This method should allow Azure AD (Entra ID) users to automatically
authenticate with VisualSVN Server using a Kerberos Ticket-Granting Ticket
(TGT) they get during logon.

Here's a video that explains how to set it up:

Intune Training - S04E03 - Configuring Hybrid Cloud Trust - (I.T)
<https://www.youtube.com/watch?v=q0Y4g0dcOY4>

And here are some MS documentation links for more details:

   - Enable Microsoft Entra Kerberos authentication for hybrid identities
   on Azure Files
   <https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-hybrid-identities-enable>
   - Enable passwordless security key sign-in to on-premises resources by
   using Microsoft Entra ID
   <https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-passwordless-security-key-on-premises>
   - How SSO to on-premises resources works on Microsoft Entra joined
   devices
   <https://learn.microsoft.com/en-us/entra/identity/devices/device-sso-to-on-premises-resources>

AFAIK, this Entra Kerberos technology is still quite new. Right now, it
only works for hybrid identities (synchronized with Microsoft Entra Cloud
Sync), although support for cloud-only identities seems to be on the roadmap
<https://techcommunity.microsoft.com/t5/itops-talk-blog/deep-dive-how-azure-ad-kerberos-works/ba-p/3070889>
.

Hope this helps!

On Wed, 20 Mar 2024 at 10:11, Jon Martin via TortoiseSVN-dev <
[email protected]> wrote:

> We have run into a problem trying to implement SVN on our secure cloud
> platform.  Is it possible to pay someone to add modern authentication to
> TortoiseSVN?
>
>  Specifically we wish to use TortoiseSVN client to access VisualSVN Server
> via Microsoft Azure Application Proxy.  This requires TSVN to be conversant
> in "OAuth 2.0 with OpenID Connect (OIDC)".  See
> https://auth0.com/docs/authenticate/protocols/openid-connect-protocol
>
> You can see the error we get by using TortoiseSVN to open this test
> repository https://visualsvn.parabilis-space.com/svn/test/
> Error: Repository moved temporarily to ...Oath2/authorize...
>
> Thank You,
>
> --Jon
>
> --
> You received this message because you are subscribed to the Google Groups
> "TortoiseSVN-dev" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/tortoisesvn-dev/c1e45328-6ecf-45bc-8065-139668619d31n%40googlegroups.com
> <https://groups.google.com/d/msgid/tortoisesvn-dev/c1e45328-6ecf-45bc-8065-139668619d31n%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
>


-- 
With best regards,
Pavel Lyalyakin
VisualSVN Team

-- 
You received this message because you are subscribed to the Google Groups "TortoiseSVN-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion on the web visit https://groups.google.com/d/msgid/tortoisesvn-dev/CAEyhmwY16s2mmB2KL0n5XHvsmoNHEQHkiykjgw-%2BfuF%3DEaE--w%40mail.gmail.com.

--000000000000661653061544d934
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><font size=3D"2">Hello,</font></div><div><font size=
=3D"2"><br></font></div><div><font size=3D"2">
If you&#39;re looking to use Azure Application Proxy to authenticate to Vis=
ualSVN Server with Azure AD credentials, there is another option you might =
find helpful: <b>Microsoft Entra Kerberos</b> authentication.=20
This option doesn&#39;t depend on Azure Application Proxy.<br><br>This meth=
od should allow Azure AD (Entra ID) users to automatically authenticate wit=
h VisualSVN Server using a Kerberos Ticket-Granting Ticket (TGT) they get d=
uring logon.<br><br>Here&#39;s a video that explains how to set it up:</fon=
t></div><div><font size=3D"2"><span><br></span></font></div><div><div style=
=3D"margin-left:40px"><font size=3D"2"><span><a href=3D"https://www.youtube=
.com/watch?v=3Dq0Y4g0dcOY4" target=3D"_blank">Intune Training - S04E03 - Co=
nfiguring Hybrid Cloud Trust - (I.T)</a></span></font></div><div><font size=
=3D"2"><span><br></span>And here are some MS documentation links for more d=
etails:<br></font><ul><li><font size=3D"2"><a href=3D"https://learn.microso=
ft.com/en-us/azure/storage/files/storage-files-identity-auth-hybrid-identit=
ies-enable" target=3D"_blank">Enable Microsoft Entra Kerberos authenticatio=
n for hybrid identities on Azure Files</a></font></li><li><font size=3D"2">=
<a href=3D"https://learn.microsoft.com/en-us/entra/identity/authentication/=
howto-authentication-passwordless-security-key-on-premises" target=3D"_blan=
k">Enable passwordless security key sign-in to on-premises resources by usi=
ng Microsoft Entra ID</a></font></li><li><font size=3D"2"><a href=3D"https:=
//learn.microsoft.com/en-us/entra/identity/devices/device-sso-to-on-premise=
s-resources" target=3D"_blank">How SSO to on-premises resources works on Mi=
crosoft Entra joined devices</a></font></li></ul><font size=3D"2">AFAIK, th=
is Entra Kerberos technology is still quite new. Right now, it only works f=
or hybrid identities (synchronized with Microsoft Entra Cloud Sync), althou=
gh support for cloud-only identities <a href=3D"https://techcommunity.micro=
soft.com/t5/itops-talk-blog/deep-dive-how-azure-ad-kerberos-works/ba-p/3070=
889" target=3D"_blank">seems to be on the roadmap</a>.<br><br>Hope this hel=
ps!</font></div>

</div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_=
attr">On Wed, 20 Mar 2024 at 10:11, Jon Martin via TortoiseSVN-dev &lt;<a h=
ref=3D"mailto:[email protected]" target=3D"_blank">tortoises=
[email protected]</a>&gt; wrote:<br></div><blockquote class=3D"gmail_=
quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,=
204);padding-left:1ex"><p>We have run into a problem trying to implement SV=
N on our
secure cloud platform.=C2=A0 Is it possible to pay someone to add modern au=
thentication to TortoiseSVN?</p>

<p>=C2=A0Specifically we wish to use TortoiseSVN client to access
VisualSVN Server via Microsoft Azure Application Proxy.=C2=A0 This requires=
 TSVN to be conversant in &quot;OAuth 2.0
with OpenID Connect (OIDC)&quot;.=C2=A0 See=C2=A0<a href=3D"https://auth0.c=
om/docs/authenticate/protocols/openid-connect-protocol" target=3D"_blank">h=
ttps://auth0.com/docs/authenticate/protocols/openid-connect-protocol</a></p=
>

<p>You can see the error we get by using TortoiseSVN to open
this test repository <a href=3D"https://visualsvn.parabilis-space.com/svn/t=
est/" target=3D"_blank">https://visualsvn.parabilis-space.com/svn/test/</a>=
=C2=A0<br><span style=3D"font-family:Calibri,sans-serif;font-size:11pt">Err=
or: Repository
moved temporarily to ...Oath2/authorize...</span></p>

<p></p>

<p>Thank You,<br></p>

<p>--Jon<br></p>

<p></p>

-- <br>
You received this message because you are subscribed to the Google Groups &=
quot;TortoiseSVN-dev&quot; group.<br>
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:[email protected]" tar=
get=3D"_blank">[email protected]</a>.<br>
To view this discussion on the web visit <a href=3D"https://groups.google.c=
om/d/msgid/tortoisesvn-dev/c1e45328-6ecf-45bc-8065-139668619d31n%40googlegr=
oups.com?utm_medium=3Demail&amp;utm_source=3Dfooter" target=3D"_blank">http=
s://groups.google.com/d/msgid/tortoisesvn-dev/c1e45328-6ecf-45bc-8065-13966=
8619d31n%40googlegroups.com</a>.<br>
</blockquote></div><br clear=3D"all"><br><span class=3D"gmail_signature_pre=
fix">-- </span><br><div dir=3D"ltr" class=3D"gmail_signature"><font color=
=3D"#888888">With best regards,<br>
Pavel Lyalyakin<br>
VisualSVN Team</font></div>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;TortoiseSVN-dev&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:[email protected]">tor=
[email protected]</a>.<br />
To view this discussion on the web visit <a href=3D"https://groups.google.c=
om/d/msgid/tortoisesvn-dev/CAEyhmwY16s2mmB2KL0n5XHvsmoNHEQHkiykjgw-%2BfuF%3=
DEaE--w%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://gr=
oups.google.com/d/msgid/tortoisesvn-dev/CAEyhmwY16s2mmB2KL0n5XHvsmoNHEQHkiy=
kjgw-%2BfuF%3DEaE--w%40mail.gmail.com</a>.<br />

--000000000000661653061544d934--