Configure an OpenID connect authentication

In this topic, you learn how to set up an authentication via OpenID and how to configure it in your Cockpit.

Prerequisites

In the Cockpit, go to Settings, and click System Settings.
Navigate to the Authentication tab and click Edit.
Click Add, and select OpenID Connect.

Result: The Authentication window opens.
In OpenID Connect, fill in or check the following fields:
1. Enter a Name for the authentication.
2. Check Active to activate this authentication method.
3. Check Show on login page to display the authentication method on the login page.
4. Enter a Description.
5. Enter a Path to generate the endpoints for the authentication method.
  
  Refer to "myopenID"? See: https://community.neptune-software.com/documentation/system-settings/documentation/openidconnect
6. In Client ID, enter the ID of the client that is registered at your identity provider.
7. Enter the Client Secret.
8. In Discovery URL, enter a well-known openid-configuration.
9. In Redirect Url, enter the URL that is used when the client is redirected back from identity provider.
  
  The URL should look like domain/public/oidc_redirect.html.
10. In Claims Assignment, click Add to add claims assignments.
11. In Auto Assignment, assign roles and the departments (Microsoft Entra ID/system?).
12. Optional: In Custom Script, you can enter your code to tweak the roles' assignment manually.
13. Click OK.
In System Settings, click Restart to activate the OpenID Connect authentication.