Configure WeChat Work External Browser Password-Free Login

This guide explains the configuration process for users to log in to IDaaS-integrated applications through an external browser without a password from the WeChat Work PC client. After configuring the WeChat Work authentication source integration in the IDaaS platform, refer to this module to configure WeChat Work external browser password-free login for various application systems.

Prerequisites

• Access management permissions for the IDaaS Enterprise Center.
• WeChat Work Open Platform account administrator permissions, and an application has been created.
• The application has been integrated into the IDaaS platform.
• The WeChat Work authentication source has been configured in the IDaaS platform.

Configuration Flow

Procedure

TIP

The example application in this guide is an OAuth authentication protocol application created in IDaaS: OAUTH_1. Applicable scope: All self-built applications and pre-integrated applications that integrate with IDaaS through protocols.

Configure WeChat Work Authentication for Application

1. Log in to the IDaaS Enterprise Center, choose Resources > Apps from the top navigation bar. This guide uses the OAuth authentication protocol application as an example. Select OAUTH_1, switch to the Login Configuration tab, select WeChat Work from the dropdown, and enable the previously added WeChat Work authentication source.

   

2. Switch to the General Info tab, and obtain the application ClientId.

   

WeChat Work Management Console Configuration

1. Log in to the WeChat Work Open Platform, choose App Management, find and enter the previously created application, click the settings behind App Homepage, and set the app homepage.

   

   WARNING

   App homepage URL composition: https://xxx.bccastle.com/api/v1/login/wechatworkqr?open_in_browser=true&client_id=vg0wJEDxdSE4yYFXXXXX7bENUx36EIeEQ

   • xxx.bccastle.com is the IDaaS tenant domain, obtained in the IDaaS Enterprise Center under Settings > Enterprise Info.
   • The client_id parameter is the application ClientId obtained in IDaaS.
   • open_in_browser is fixed as true.

Verify WeChat Work Client External Browser Password-Free Login

TIP

The actual WeChat Work client external browser password-free login process is related to the Account Auto Bind and When User Not Associated options in Configure WeChat Work Authentication Source. Please log in as prompted by the interface.

1. The user logs in to the WeChat Work client, finds the application created in WeChat Work, and clicks the application to open the computer's default browser and log in to OAUTH_1 without a password.