WeCom authentication integration

# WeChat Work Authentication Integration

MrDoc Pro edition supports **QR code login** integration and **passwordless login configuration** for WeChat Work "Internal Applications".

## 1. Create a WeChat Work Application

Log in to the WeChat Work admin console, and go to the "Application Management" page.

![](/media/202109/2021-09-23_163858_446982.png)

Scroll to the bottom of the page, and click "Create Application" under the "Self-built" category:

![](/media/202109/2021-09-23_163953_736840.png)

Fill in the information as required:

![](/media/202109/2021-09-23_164025_687267.png)

After the application is created, you will enter the application management page:

![](/media/202109/2021-09-23_164224_742444.png)

The "AgentId" and "Secret" information need to be copied for later configuration.

## 2. Configure the WeChat Work Application

### Trusted Domain Verification

After downloading the domain verification file, you can use Nginx to configure domain verification, or configure it in MrDoc. Refer to the documentation: [https://doc.mrdoc.pro/doc/3990/#h2-配置文本文件访问](https://doc.mrdoc.pro/doc/3990/#h2-配置文本文件访问)

### Application Homepage Configuration

Click to set the "Application Homepage":

![](/media/202112/2021-12-25_081219_543010.png)

Fill in the web address with the following URL:

```
https://open.weixin.qq.com/connect/oauth2/authorize?appid={企业ID}&redirect_uri={域名}/oauth/wechatwork_callback/&response_type=code&scope=snsapi_base&state=STATE#wechat_redirect
```

![](/media/202112/2021-12-25_081253_823286.png)

For example, if the enterprise ID is `123456` and the domain is `http://mrdoc.com`, then the application homepage address is as follows:

```
https://open.weixin.qq.com/connect/oauth2/authorize?appid=123456&redirect_uri=http://mrdoc.com/oauth/wechatwork_callback/&response_type=code&scope=snsapi_base&state=STATE#wechat_redirect
```

### Enterprise Trusted IP Configuration

Configure the enterprise trusted IP as your server IP address.

![](http://file.mrdoc.pro/mrdoc-oss/img/2023/01/14/2023-01-14_101005_4555290.04902892920743951.png)

### Web Authorization and JS-SDK Configuration

In "Web Authorization and JS-SDK", click "Set Trusted Domain":

![](/media/202112/2021-12-25_080559_623140.png)

Fill in your MrDoc domain address:

![](/media/202112/2021-12-25_080622_897697.png)

### WeChat Work Authorization Login Configuration

Scroll to the bottom of the page, and set "WeChat Work Authorization Login" under "Developer Interface":

![](/media/202109/2021-09-23_164415_884069.png)

Under "Web Page" on the settings page, click edit and enter the domain or IP address where your MrDoc Pro edition application is deployed.

![](/media/202109/2021-09-23_164528_014945.png)

Click save.

## 3. Configure MrDoc

Log in to MrDoc Pro edition as an administrator, and go to the "Third-party Login" page under "Site Management":

![](/media/202109/2021-09-23_164643_906007.png)

In the "WeChat Work" tab, select "Enable", and fill in the "AgentId" and "Secret" of the WeChat Work application into the corresponding forms.

As for the "Enterprise ID", you need to obtain it from the "My Enterprise" page in the WeChat Work admin console:

![](/media/202109/2021-09-23_164828_720968.png)

Scroll to the bottom of the enterprise information page, and you can see the "Enterprise ID":

![](/media/202109/2021-09-23_164945_292570.png)

Copy it and fill it into the form in the MrDoc Pro edition configuration.

Finally, click save to complete the configuration of WeChat Work QR code login for MrDoc Pro edition.

## 4. QR Code Login

After enabling WeChat Work QR code login, the WeChat Work icon will be displayed on the login page of MrDoc Pro edition.

![](/media/202109/2021-09-23_165105_694802.png)

Click the WeChat Work icon, and it will jump to the WeChat Work QR code scanning interface. After scanning the code with your phone and confirming the login, verification will be completed.

## 5. Passwordless Login

After completing the above configuration, you can access MrDoc without logging in by clicking the created application in the WeChat Work workspace application list.

## 6. Other Configurations

### Sync WeChat Work Members to MrDoc

You can batch sync WeChat Work members to MrDoc on the WeChat Work authentication integration configuration page.

Currently, the following three sync methods are supported:

- Import WeChat Work users as MrDoc users;
- Import WeChat Work users as MrDoc users, import the departments to which WeChat Work users belong as MrDoc user groups, and add users to the user groups;
- Clean up WeChat Work users in MrDoc; users that do not exist in WeChat Work will be set to the "Disabled" status;

### Binding WeChat Work Accounts to MrDoc Accounts
If you log in directly through WeChat Work, a new account will be created in the MrDoc account system. In addition, you can also bind WeChat Work to an existing MrDoc account.

The operation method is: enter the personal center page, click "Personal Settings" in the "Personal Management" menu, switch to "Third-party Accounts", and click "Bind WeChat Work Account" to configure it.