To configure Integration Server to use OpenID Connect with login profiles, complete the following steps.
- In the WEB-INF folder of your Integration Server deployment, open the integrationserver.ini file in a text editor.
- In the [OpenID Connect Login Profiles] section, set sso.openid.login.enabled to TRUE.
-
Append a profile name into the sso.openid.profiles setting for
each profile you would like to configure.
Note: Profile names must only contain lowercase alphanumeric characters.
- Enter the client id configured with the OpenID Provider for each profile using the sso.openid.profile.[profileName].client.id setting.
- Enter the OpenID Provider's authorization endpoint URL for each profile using the sso.openid.profile.[profileName].authorization.endpoint setting.
- For web-based Perceptive clients, such as Perceptive Experience, enter a redirect URI for successful authentication attempts using the sso.openid.profile.[profileName].post.login.redirect.uri setting.
- For web-based Perceptive clients, enter a redirect URI for unsuccessful authentication attempts using the sso.openid.profile.[profileName].error.redirect.uri setting.
-
Optional Configure any optional login profile settings. A detailed explanation
of each login profile setting is provided in the inserver.ini OpenID Connect
Login Profiles settings topic in the Content System Online Help.
[OpenID Connect Login Profiles] sso.openid.login.enabled=TRUE sso.openid.profiles=hylandexperience sso.openid.profile.hylandexperience.client.id=AAA3983D-9632-4F66-828C-71EC5535C0BA sso.openid.profile.hylandexperience.authorization.endpoint=https://sample.onbase.com/IdentityProvider/connect/authorize sso.openid.profile.hylandexperience.post.login.redirect.uri=https://sample.onbase.com/hylandexperience/#oidc/callback sso.openid.profile.hylandexperience.error.redirect.uri=https://sample.onbase.com/hylandexperience/#oidc/callback?error={error}