Configure OIDC Protocol Application SSO

In addition to supporting the configuration of the OIDC protocol as an authentication source for logging in to various application systems through OIDC protocol authentication, the IDaaS platform also supports integrating applications through the OIDC protocol to achieve application single sign-on (SSO) with IDaaS as the authentication platform. After logging in to the IDaaS User Center, users can directly jump to and log in to the application without a second login.

Prerequisites

Administrator permissions for the IDaaS Enterprise Center.

Procedure

Configure OIDC Protocol Application

1. Log in to the IDaaS Enterprise Center, choose Resources > Apps from the top navigation bar, click Add Self-Built App, set the app name, save, and enter the app detail page.

2. On the app information page, enable Authentication Integration, set it to OIDC, and save.

   

3. Click Configure next to Authentication Integration to enter the authentication integration detail page, and set the authorization mode and Token signature algorithm matching your application.

   

4. Switch to the General Info tab to obtain ClientId and ClientSecret.

   

5. Switch to the Authorization Management > App Accounts page, and add access accounts for the app.

   

6. Choose Settings > Service Configuration from the top navigation bar, and click OIDC to obtain the corresponding parameters.

   

7. Configure the obtained OIDC-related information into your application.

Development Integration

After configuration in the IDaaS platform is complete, please refer to the corresponding mode in the OIDC Protocol to complete the subsequent integration configuration. After configuration, users can single sign-on to the app from the User Center.