Guides
System Settings
Integrate Lark

Integrate Lark authentication

About Lark

Lark authentication is an identity verification mechanism provided by Lark (the international version of Feishu), enabling enterprises and third-party applications to authenticate and authorize users through Lark.

How to configure

1
In the upper-right corner of any page in JumpServer, click .image
2

Navigate to System settings > Authentication > Lark.

3

In the Lark field, check to enable Lark authentication.

4

In the App ID field, type the Lark app ID, a unique identifier for the application.

5

In the App secret field, type the Lark app secret, used to obtain an access token for calling the Lark API.

6

In the User attribute field, type the user attribute mapping. The key represents the JumpServer user attribute name (available options: name, username, email, phone, comment), while the value corresponds to the Lark user attribute name.

Lark User Attribute Example
{
  "name": "nickname",
  "username": "user_id",
  "email": "email"
}
7

In the Organization field, after authentication and creation, the user will be added to the selected organization.

8

Click Submit.

Test Lark connection

1
In the upper-right corner of any page in JumpServer, click .image
2

Navigate to System settings > Authentication > Lark.

3

Scroll to the bottom of the page.

4

Click Test.

JumpServer Lark URLs

QR Login URL
https://jumpserver.example.com/core/auth/lark/qr/login/
QR Login Success Callback URL
https://jumpserver.example.com/core/auth/lark/qr/login/callback/