Slack is a communication platform that enables streamlining conversations, organizing channels, and integrating with other applications. Admins can also receive push notifications about access requests and their statuses in an available audit channel.

Through this integration, Apono enables your staff to request, view, and approve access to your resources via Slack.

Prerequisite

Integrate Slack

Follow these steps to complete the integration:

1. On the Catalog tab, click Slack. The Add Integration page appears.

2. Click Connect. The Slack connection screen appears.

3. If your Slack account has access to multiple Slack workspaces, select the appropriate workspace from the dropdown menu.

4. Click Allow to grant Apono access to the Slack workspace.

Now that you have completed this integration, resource access requests can be made via Slack.

Microsoft Teams is a communication platform that streamlines conversations, organizes channels, and integrates with other applications.

By installing the Apono app, your staff can request, view, and approve access to your resources via Teams.​

Prerequisites

​

Install the Apono app

Follow these steps to install the app:

1. In Teams, click Apps.

2. In the Apps search field, enter Apono. The app results return in the main panel.

3. On the Apono card, click Add. The Apono app model appears.

4. Click Add.

5. Follow the onscreen prompts to grant Apono additional permissions on behalf of your organization.

​After the app has been installed, it will appear in your list of apps. You can now integrate Teams with Apono.​

Integrate Teams

Follow these steps to complete the integration:

1. On the Catalog tab, click Teams. The Add Integration page appears.

2. Click Connect. The Microsoft connection screen appears.

3. Select your Microsoft account. If your account is signed out, you will need to sign in to your account. If your account is not listed, click Use another account and sign in to the account.

4. Click Accept to grant Apono access to your organization's Microsoft account.

The Apono Backstage integration allows you to configure Apono as a custom plugin in your Backstage app. This plugin brings Apono's Just-in-Time (JIT) access management to the forefront, making it easily accessible to developers within Backstage. With this integration, you can now effortlessly connect your Backstage app to Apono and manage access directly from the Backstage interface.

Prerequisites

• Generate RSA Private & Public Keys using OpenSSL using the following commands. Be sure to copy both public & private keys encoded as base64 to use later.

# Generate RSA Private Key
openssl genpkey -algorithm RSA -out private_key.pem -pkeyopt rsa_keygen_bits:2048

# Display private_key.pem content encoded as base64
cat private_key.pem | base64

# Generate RSA Public Key
openssl rsa -pubout -in private_key.pem -out public_key.pem

# Display public_key.pem content encoded as base64
cat public_key.pem | base64

• Create a Backstage app with an intention to add an existing plugin to it. For more information on Apono plugin for Backstage frontend and backend app.

• Install yarn (yarn install) and install any dependencies.

Configuration steps

In Apono

1. On Backstage integration page, provide the following information about your Backstage environment:

1. Under Secret Store, paste your base64-encoded public key.

1. Click Connect.

In Backstage

Add Apono plugin to Backstage Frontend App

1. To create a new Apono frontend plugin, run the following on your command line from the root of your project.

yarn --cwd packages/app add @apono-io/backstage-plugin-apono

1. Update router for the AponoPage inside packages/app/src/App.tsx.

import { AponoPage } from '@apono-io/backstage-plugin-apono';

// Inside your App component's routes
<Route path="/apono" element={<AponoPage />} />

1. In your app-config.yaml file, add the Apono client URL to your Content Security Policy to allow the Apono plugin to load its content in an iframe.

backend:
  csp:
    frame-src: ["'self'", "https://backstage-client.apono.io"]

Add Apono plugin to Backstage Backend App

To attach and run the Apono plugin, you will make some modifications to your backend.

1. Add Apono plugin to your backend system packages as dependencies. Run the following command.

# from the repository root
yarn --cwd packages/backend add @apono-io/backstage-plugin-apono-backend

1. Update packages/backend/src/index.ts.

backend.add(import('@apono-io/backstage-plugin-apono-backend'));

1. In app-config.yaml, configure Backstage to connect to the Apono API.

apono:
  publicKey: ${APONO_PUBLIC_KEY} # Base64 encoded RSA public key with minimum 2048 bits length
  privateKey: ${APONO_PRIVATE_KEY} # Base64 encoded RSA private key with minimum 2048 bits length

Backstage Sidebar Update

• (Example) Add Apono plugin to Backstage sidebar. Update the Backstage sidebar in packages/app/src/components/Root/Root.tsx with the following code.

import { AponoPage } from '@apono-io/backstage-plugin-apono';

export const Root = ({ children }: PropsWithChildren<{}>) => (
  <SidebarPage>
    <Sidebar>
      <SidebarLogo />
      {/* ... */}
      <SidebarGroup label="Menu" icon={<MenuIcon />}>
        {/* ... */}
        <SidebarItem icon={ExtensionIcon} to="/apono" text="Apono" />
        {/* ... */}
        <SidebarDivider />
        {/* ... */}
      </SidebarGroup>
    </Sidebar>
  </SidebarPage>
);

Troubleshooting

• The following error occurs when you try to enter Apono app on your Backstage app: Request failed with status code 401 / Failed to load application

This issue might occur when you accidentally delete your Apono Backstage integration.

To resolve this issue, recreate the Backstage integration in your Apono account with the Public Key defined in your Backstage app.

To find your public key, go to app-config.yaml on your Backstage app repo and look for:

{...}
apono:
  publicKey: ${APONO_PUBLIC_KEY}
{...}