OpenID Connect support

The Bold BI application can be configured to support OpenID Connect for Single Sign-On (SSO), allowing users to log in directly to the Bold BI application after authenticating using OpenID Connect.

Configure OpenID Connect provider

1. A user account with an OpenID provider.

2. Register the Bold BI application with the OpenID Connect provider.

Steps to configure OpenID in Bold BI

1. Please log in to Bold BI using an admin credential.

2. Click on Settings in the left-side menu.

   

3. Click on Authentication and then select OpenID Connect.

   

4. Please provide the following details on the OpenID Connect settings page of the Bold BI application.

   Provider Name	It represents the name of the authentication provider to be displayed in the login page.
   Provider Logo	It represents the logo of the authentication provider to be displayed in the login page.
   Authority	It is the instance created for the user in the provider.
   Client ID	It is an unique identifier provided to each of the applications while registering in the providers.
   Client Secret	It is a secret key that is used to authorize the applications.
   Identifier	It is the property name that holds the email address of the user in the deserialized ID token.
   Logout Endpoint	It is an end point that logout the thrid-party provider.

   

If we need to import the OpenID Connect groups, we must configure the group details when saving the OpenID authentication settings.

The previously mentioned similar steps are applicable to configure OpenID support in the User Management Server by logging into the URL {Bold BI URL}/ums/administration/sso?view=openid-settings with admin credentials.

Here is a list of a few OpenID Connect providers, along with an explanation of how to connect with the Bold BI application.

• Auth0
• Okta
• OneLogin

OpenID Connect support is provided in both the Bold BI sites and User Management Server. This support can be managed individually for each site on the settings page by disabling the option, as shown in the following screenshot.

Set OpenID Connect as Default Authentication

OpenID Connect can be set as the default authentication method OpenID Connect settings are enabled and saved. Follow these steps:

1. On the settings page, click on the Authentication tab and then select General.

2. Please enable the Enable Default Authentication option and select OpenID Connect as the default authentication provider, as shown in the following screenshot.

   

Disabling OpenID Connect Settings

When OpenID Connect is set as the default authentication and you try to disable the OpenID Connect settings , the following pop-up will be displayed. Clicking Yes will disable the OpenID Connect default authentication.

Configure OpenID authentication using REST API

To configure the OpenID settings using the REST API, refer to this REST API document.

In addition to configuring the OpenID settings, you can also configure the group import settings to import the OpenID groups. Include the group settings details based on the provider type to configure the group import settings. For more information on the different group import settings details based on the provider, please refer to this FAQ document.