3.18 Configuring OAuth SSO

This section discusses various settings that enable SSPR to integrate with OAuth Identity Server for a single sign-on.

To configure OAuth SSO, perform the following:

  1. In Configuration Editor, click Settings > OAuth SSO.

  2. Click View > Always Show Advanced Settings to see and configure the advanced settings.

  3. Configure the following settings:

    Field

    Description

    OAuth Login URL

    Specify the URL for OAuth server login. This is the URL to redirect the user for authentication.

    OAuth Code Resolve Service URL

    Specify the URL for OAuth Code Resolve Service. This Web service URL is used for resolving the artifact that the OAuth identity server returns.

    OAuth Get Attributes Service URL

    Specify the URL for the Web service that the Identity Server provides to return attribute data about the user.

    OAuth Client ID

    Specify the client ID of the OAuth client. This value is provided by the OAuth Identity Service provider.

    OAuth Shared Secret

    Specify a password for the OAuth shared secret. This value is provided by the OAuth Identity Service provider.

    OAuth Username/DN Login Attribute

    Specify the attribute that you want the OAuth server to identify as username for local authentication. This value is then resolved as the same password the user had typed at the local authentication page.