The following figure shows the Configure New Identity Provider page.

Figure Configure New Identity Provider page
Configure New Identity Provider page

The following table describes the parameters on the Configure New Identity Provider page.

NOTE

The example values in the following table are not applicable to the Chromeleon IdP. The parameters for the Chromeleon IdP are pre-filled and cannot be edited.

Table Parameters on the Configure New Identity Provider page

Parameter

Description

Value

Identity Provider Name

A unique name of the IdP.

NOTE: When you enter this value, both the Authentication Scheme and CallbackPath values are updated automatically.

Example: facebook

Authorization URL

The IP address and port of the IdP. You can find this URL on the IdP’s website.

Examples:
Facebook: https://www.facebook.com/v10.0/dialog/oauth
Google: https://accounts.google.com/o/oauth2/v2/auth
Microsoft Entra ID: https://login.microsoftonline.com/organizations/v2.0

Client ID

A unique identifier that is provided by the IdP.

N/A

Client Secret

A string that the application uses to prove its identity when it requests a token. The string is provided by the IdP. This parameter is also referred to as an application password.

N/A

Scopes

The features of an application that a user account has access to. The features are displayed as a list where the items are separated by commas or semicolons with no spaces. The IdP provides the scopes.

NOTE: The list separator (comma or semicolon) is determined by either your browser's regional settings or your preferences in User Settings. For more information, see Change the list and decimal separators.

Examples: profile,email,openid,offline_access

Response Types

The response types that are provided by the IdP.

code, token, and id_token

Authentication Scheme

A unique identifier that the system uses to identify the IdP.

NOTE: This parameter is automatically populated based on the value that you enter for the Identity Provider Name parameter.
Format: oidc-{identityprovidername}

Example: If the Identity Provider Name is facebook, the Authentication Scheme is oidc-facebook.

CallbackPath

The path that the application directs you to when you sign in. It must be set up on the IdP's website as either an allowed callback or a redirect URI.

NOTE: This parameter is automatically populated based on the value that you enter for the Identity Provider Name parameter.
Format: /federation/oidc-{identityprovidername}/signin

Format of paths to register with the identity server:

  • Sign in: https://identity.{basedomain}/federation/oidc{identityprovidername}/signin
  • Sign out: https://identity.{basedomain}/Account/Logout

Example: If the Identity Provider Name is facebook, the CallbackPath is /federation/oidc-facebook/signin

Example of paths to register with the identity server:

  • Sign in: https://identity.ardia.example.com/federation/oidc-google/signin
  • Sign out: https://identity.ardia.example.com/Account/Logout

Email Domain(s)

A comma- or semicolon-separated list of email domains that are supported by the IdP.

NOTE: The list separator (comma or semicolon) is determined by either your browser's regional settings or your preferences in User Settings. For more information, see Change the list and decimal separators.

Examples: thermofisher.com, unitylabservices.com