Iden Platform GuideSSO
OIDC
Set up OIDC SSO between Iden and one of your connected apps.
Iden acts as the OIDC provider; the connected app is the relying party (RP).
Values Iden gives you
| Field | What it is |
|---|---|
| Issuer ID | Iden's unique identifier as the provider |
| Discovery URL | The address the app uses to automatically fetch Iden's OIDC configuration |
| Client ID | The app's identifier for this connection |
| Client Secret | The app's secret for this connection |
| Audience | The intended recipient of the issued tokens |
Values the app needs from you
| Field | What it is |
|---|---|
| Redirect URI(s) | The app's own OAuth callback URL, or URLs |
Configuration options
| Option | What it controls |
|---|---|
| Access token validity | How long an access token stays valid. Defaults to 1 hour if left blank. |
| Refresh token validity | How long a refresh token stays valid. Defaults to 30 days if left blank. |
| Allow refresh tokens | Whether the app can silently refresh a session without the person signing in again |
Require MFA for login, Launch URL, and Signing key algorithm also apply here, see the SSO overview for what each one does.
Claims you will receive
The ID token and userinfo response include:
subemailandemail_verifiedname,given_name, andfamily_name(first and last name split)
They do not include preferred_username, nickname, or a groups claim.
How your team accesses the app
Through the Go to app button in Iden's dashboard, which takes your team to the app's own login page to complete sign-in.