Enterprise Licenses Only

This plugin allows you to delegate access of OAuth providers.
Currently only Google Sign in is supported.

1. Google Sign-In

You will start at the API credentials manager:

You first need to make a project. My example calls this CrushFTP-Test.

Next select create credentials, and choose the Web Application type.


When configuring the credential, you have to tell Google the domain you will be originating from when creating the auth token, so this is the URL you use for server administration. Just the protocol://dns_or_ip:port Don't have a trailing slash or it will complain.
You also need to put in the redirect URL of where Google is going to send back the Id token (Id Token : That will be used for authentication of the google user). Copy the Client ID that will be required to integrate the Google Sing-In Button.

Integrate Google Sign-In button


Go to the Preferences-> Ip/Servers and select the HTTP or HTTPS port item (OAuth Sign In Tab) where you want to enable the Google Sing-In button. Check the "Enable Google Sign in" flag and provide the Client ID of you Google project(mentioned above).


2. Microsoft Sign-In

It requires Microsoft Graph Application registration. Start at the Microsoft azure portal:

Application registration: Go to the App registrations and click on New registration:


Name it. Select Single-page Application as platform. The redirect url must ends with :WebInterface/login.html. Then click on register.


Make sure that MSAL.js 2.0, Implicit grant (Access Token, ID Token) grant types are permitted.


Get Client Id and Tenant Id from App registration -> Overview.


Go to the Preferences-> Ip/Servers and select the HTTP or HTTPS port item((OAuth Sign In Tab) where you want to enable the Microsoft Sing-In button. Check the "Enable Microsoft Sign in" flag and provide the Client ID and Tenant ID of your App registration(mentioned above).

3. Plugin Settings

1. Username matching -> It filters the OAuth user name (Google Auth: email address, Microsoft Auth: user principle name). You can put multiple value separated by comma. Domain filter is allowed to (like *mydomain.com).

2. Allowed authentication types

3. OAuth only used for Authentication (User manager then defines user's access.) -> If the users already exists with username of the OAuth, you can use the plugin just for authentication.

4. Template Username -> The signed in user inherits no just the settings, but the VFS items too (as Linked VFS).

Import settings from CrushFTP user -> The signed in user inherits just the settings from this user.

5. VFS related settings : You can also assign a VFS item for the signed in user.


Add new attachment

Only authorized users are allowed to upload new attachments.

List of attachments

Kind Attachment Name Size Version Date Modified Author Change note
app_reg_auth_config.png 160.8 kB 1 11-Feb-2022 03:18 krivacsz
app_reg_config.png 173.1 kB 1 11-Feb-2022 03:10 krivacsz
gsign_in_button.png 204.4 kB 1 23-Aug-2021 16:11 krivacsz
plugin_settings.png 92.0 kB 2 11-Feb-2022 02:27 krivacsz
port_item_settings.png 76.4 kB 2 11-Feb-2022 02:41 krivacsz
port_item_settings_ms.png 75.3 kB 1 11-Feb-2022 03:35 krivacsz
« This page (revision-60) was last changed on 11-Feb-2022 03:39 by krivacsz
G’day (anonymous guest)
CrushFTP10 | What's New
JSPWiki v2.8.2