|
Configuring an OpenID Connect (OIDC) application |
Scroll |
1. Before OneLogin can be set up in Therefore™, a new application needs to be created in the OneLogin Administration portal.
2. Add a new Application by clicking the Add App button.
3. Search for the OpenId Connect application in OneLogin and select it.
4. To clarify what this OIDC application is used for, the application can be renamed to Therefore now.
5. Optionally, images and a description can be added. Click Save to proceed. Once the application has been saved, the Configuration section allows you to specify the redirect URIs needed by Therefore™. These URIs are case sensitive. Please use the following redirect URIs:
|
1.Therefore™ Client http://127.0.0.1:49152/redirect This URI is just a placeholder as the redirect is not actually executed.
2.Therefore™ Classic Web Client https://mytenant.thereforeonline.com/Client/WEB/Login/SSOLogin.aspx This URI needs to be adjusted to match your tenant and Therefore™ Online domain.
3.Therefore™ Dynamic Web View https://mytenant.thereforeonline.com/signin This URI also needs to be adjusted to match your tenant and Therefore™ Online domain.
Redirect URIs for other Therefore™ applications such as the Therefore™ Go app can be found here. |
6. In the Parameters section, there will already be a Groups field. However, it has to be adjusted to return roles instead of groups.
7. The default value has to be changed to User Roles with Semicolon Delimited input (Multi-value output). If this is set up correctly, Therefore™ will retrieve the user roles directly from the authentication without the need for additional API requests.
8. In the SSO section, the Application Type needs to be set to Native for Therefore™ Go. Otherwise it can be left on the default setting Web. Authentication Method can be left on the default setting Basic. The Client ID is needed in the next step to configure the external directory provider in Therefore™.
9. To grant users access to this new application, go to the Access section and apply a role. All users with this role will be able to use this application. Alternatively, access can also be granted for specific users but not through the Users section of the application. Instead, it needs to be granted through the Users menu entry by editing a user’s applications.
10. In the Applications menu entry, your new application will be displayed, and the amount of users that are allowed to use it will be shown.
