Reference

• Architecture Overview
  • Introduction
  • Architecture and networking
• Single Sign-On and User Provisioning
  • Single sign-on and user provisioning: the user manual
  • Trouble shooting and FAQ
  • Generic setup
  • SSO integration with ADFS
  • SSO integration with Azure
  • SSO integration with Centrify
  • SSO integration with Okta
  • Internals for the intensely curious
• Audio/video calling, restund servers (TURN/STUN)
  • Introduction
  • Architecture
  • What is it used for
  • Network
  • Protocols and open ports
  • Amount of users and file descriptors
  • Load balancing and high-availability
  • Discovery and establishing a call
  • DNS
• Conference Calling 2.0 (aka SFT)
  • Background
  • Architecture
  • Establishing a call
  • Prerequisites
• Federated Conference Calling
  • Multi-SFT Architecture
• Minio
  • Minio philosophy
  • Hurdles from the trenches: disk usage statistics; directories vs. disks
• Helm
  • Overriding helm configuration settings
• Federation
  • Federation Achitecture
  • Backend to backend communication
  • Federation API
• Connecting Wire Clients
  • How to associate a wire client to a custom backend using a deep link
  • How to use custom root certificates with wire clients
  • How to use a custom backend with the desktop client
  • How to redirect email domains from cloud (or any other backend) to a custom backend
• Client API documentation
  • Authentication
  • Swagger / OpenAPI documentation
• Crypto libraries and sources of randomness
• Block personal user creation
  • In Brig
  • In the WebApp
• Classified Domains
• Federation
  • Summary of necessary steps to configure federation
  • Choose a Backend Domain
  • Consequences of the choice of a backend domain
  • DNS setup for federation
  • Generate and configure TLS server and client certificates
  • Configure helm charts: federator and ingress and webapp subcharts
  • Applying all configuration changes
  • Manually test that your configurations work as expected
• Installing and setting up Legal Hold
  • Introduction
  • Installing Legal Hold
  • Configuring Team Settings to use Legal Hold
• Messaging Layer Security (MLS)
• User Searchability
  • Searching users on the same backend
  • Searching users on another federated backend
  • Changing the settings for a given team
• Server and team feature settings
  • 2nd factor password challenge
  • Rate limiting of code generation requests
  • Guest links
  • TTL for nonces
  • MLS End-to-End Identity
  • MLS Migration