Difference between revisions of "OpenID Connect"

From Studentnet Wiki
Jump to navigation Jump to search
 
Line 1: Line 1:
 
==OpenID Connect==
 
==OpenID Connect==
 
+
===General Settings===
 
#Login to '''Cloudwork Dashboard'''
 
#Login to '''Cloudwork Dashboard'''
 
#Navigate to '''Single Sign On'''>'''Manage OpenID Connect Apps'''<br>[[File:Openidlist.PNG|centre|frame|Example of OpenID Connect Apps List]]
 
#Navigate to '''Single Sign On'''>'''Manage OpenID Connect Apps'''<br>[[File:Openidlist.PNG|centre|frame|Example of OpenID Connect Apps List]]
Line 12: Line 12:
 
===OpenID Connect IDP Details===
 
===OpenID Connect IDP Details===
 
#Navigate to '''Single Sign On'''>'''Manage OpenID Connect Apps'''>'''Identity Provider'''<br>[[File:Openid_idp_details.PNG|centre|frame|Example of OpenID Connect IDP Details]]
 
#Navigate to '''Single Sign On'''>'''Manage OpenID Connect Apps'''>'''Identity Provider'''<br>[[File:Openid_idp_details.PNG|centre|frame|Example of OpenID Connect IDP Details]]
 +
 +
 +
 +
===Supported Scopes===
 +
Cloudwork supports the following scopes
 +
*'''openid''': Required for OpenID Connect
 +
*'''email''': Optional; required if you need the user's primary email address
 +
*'''profile''': provides the standard profile claims defined by the OpenID Connect specs
 +
*'''https://scopes.cloudwork.id/profile''': provides custom claims configured in Cloudwork that aren't explicitly part of the OIDC spec, such as SIS ID
 +
*'''offline_access''': allows access to refresh tokens
  
 
[[Category:Cloudwork Dashboard]]
 
[[Category:Cloudwork Dashboard]]

Latest revision as of 00:47, 19 August 2025

OpenID Connect

General Settings

  1. Login to Cloudwork Dashboard
  2. Navigate to Single Sign On>Manage OpenID Connect Apps
    Example of OpenID Connect Apps List

Here you will be able to list of already configured OpenID Connect Apps

Creating a new OAuth App

  1. Navigate to Single Sign On>Manage OpenID Connect Apps > Add New Service
    Newoauth.png

OpenID Connect IDP Details

  1. Navigate to Single Sign On>Manage OpenID Connect Apps>Identity Provider
    Example of OpenID Connect IDP Details


Supported Scopes

Cloudwork supports the following scopes

  • openid: Required for OpenID Connect
  • email: Optional; required if you need the user's primary email address
  • profile: provides the standard profile claims defined by the OpenID Connect specs
  • https://scopes.cloudwork.id/profile: provides custom claims configured in Cloudwork that aren't explicitly part of the OIDC spec, such as SIS ID
  • offline_access: allows access to refresh tokens