Home / Platform management / Users / IDPs / Managing OIDC

Managing OIDC

Overview of OIDC

OIDC (OpenID Connect) is an identity authentication standard protocol based on the OAuth 2.0 protocol.

It uses an OAuth 2.0 authorization server to provide user identity authentication for third-party clients and passes the corresponding identity authentication information to the client.

OIDC allows all types of clients (including server-side, mobile, and JavaScript clients) to request and receive authenticated sessions and end-user information. This specification suite is extensible, allowing participants to use optional features such as identity data encryption, OpenID Provider discovery, and session management when meaningful. For more information, please refer to the OIDC official documentation .

Adding OIDC

By adding OIDC, you can use third-party platform accounts to log in to the platform.

Note: After OIDC users successfully log in to the platform, the platform will read the user’s email attribute as the unique identifier for the user on the platform. OIDC-supported third-party platform users to be added must have an email attribute; otherwise, OIDC users added afterward will not be able to log in to the platform.

Procedure of Operation

In the left navigation bar, click Users > IDPs.
Click Add OIDC.
Configure the Basic Information parameters.
Configure the OIDC Server Configuration parameters.
- Identity Provider URL: issuer, the access address of the OIDC identity provider.
- Client ID: clientID, the ID of the OIDC client.
- Client Secret: clientSecret, the secret key of the OIDC client.
- Redirect URI: redirectURI, the callback address after logging in to the third-party platform, which is the URL of the dex issuer + /callback.
- Logout URL: logoutURL, the address visited by the user after performing the Logout operation. If empty, the logout address is the platform’s initial login page.
In the IDP Service Configuration Validation area, enter the Username and Password of a valid OIDC account to verify that the configuration is correct.

Tip: If the username and password are entered incorrectly, an error will be reported during the addition, indicating an invalid username or password, and OIDC cannot be added.
Click Create.

Relevant Operations

You can click the on the right in the list page or click Actions in the upper-right corner on the details page to update or delete OIDC as needed.

Operation	Description
Update OIDC	Update the added OIDC configuration. After updating the OIDC configuration information, the original users and authentication methods will be reset and synchronized according to the current configuration.
Delete OIDC	Delete OIDC that is no longer used by the platform. After deleting OIDC, all users synchronized to the platform through this OIDC will have an Invalid status (the binding relationship between users and roles remains unchanged), and they cannot log in to the platform. After re-integrating, users can be activated by successfully logging in to the platform. Tip: After deleting IDP, if you need to delete users and user groups synchronized to the platform through OIDC, check the checkbox Clean IDP Users and User Groups below the prompt box.

Operation

Description

Update OIDC

Update the added OIDC configuration. After updating the OIDC configuration information, the original users and authentication methods will be reset and synchronized according to the current configuration.

Delete OIDC

Delete OIDC that is no longer used by the platform. After deleting OIDC, all users synchronized to the platform through this OIDC will have an Invalid status (the binding relationship between users and roles remains unchanged), and they cannot log in to the platform. After re-integrating, users can be activated by successfully logging in to the platform.
Tip: After deleting IDP, if you need to delete users and user groups synchronized to the platform through OIDC, check the checkbox Clean IDP Users and User Groups below the prompt box.