Configure SSO with OAuth Authentication Method – Product Manuals

NOTE:

Refer to Introduction to Configuring Authentication Methods before proceeding.

NOTE:

Implementing new users has licensing implications, contact us to ensure you have valid licensing.

Click the Administration cog on the navigation bar of the Management Center.
Select Users, Roles, and Groups > Authentication Methods in the left navigation menu.

Choose from the following options:

NOTE:

To expand or collapse each authentication method information section, click the arrow beside the authentication method name. This setting will be saved.

If You Want To

Then

Add an authentication method

Click the drop-down arrow to the right of the Add Method action button.
Select Add OAuth Method.
Go to the next step.

Edit an authentication method

Click EDIT beside the authentication method you want to edit.
Go to the next step.

Enable/disable an authentication method

Click the ON/OFF toggle beside the authentication method you want to turn on or off.

NOTE: You can have multiple authentications turned on, but you must have at least one turned on.

Complete/edit the following fields:

Field	Description
Authentication Type	This field displays the authentication type OAuth and cannot be modified.
Method Name	Enter a unique name to identify the authentication configuration.
Client ID	Enter a unique ID for the application that will be communicating with the HTTP service.
Client Secret	Click SET. Enter the secret key or phrase used to encrypt the query string. Click Save. NOTE: A message displays indicating the Client Secret is set. For security purposes, if you set it again the current value does not display.
Manually edit manifest	Select this option to manually set the manifest file. Click EDIT MANIFEST. Enter the Manifest information. Click VALIDATE. NOTE: A green checkmark indicates a valid manifest file. Click Save.
Automatically retrieve manifest from URL	Select this option to set the manifest from a discovery URL. Enter the URL in the field. Click VIEW MANIFEST. NOTE: A green checkmark indicates a valid manifest file. Review the manifest. Click Close.
PROFILE MAPPING section	This section lists all of the user attributes available within a user account on the Server. You can map each user profile field to your IDP by entering a Claim for it. You can enter a default value for any claim that is not unique to a user by putting quotes around the value. NOTE: User edits to a Claim supplied by an IDP will be overwritten by the IDP value. Refer to Creating And Managing User Accounts for more information on each user profile field.

Click Save.