OpenID Connect support

The Bold BI application can be configured to support OpenID Connect for Single Sign-On (SSO), so that the users can log in directly to Bold BI application after authenticating using the OpenID Connect.

Configure OpenID Connect provider

1. An account with an OpenID provider.

2. Register the Bold BI application in the OpenID Connect provider.

Steps to configure OpenID in Bold BI

1. Login to the Bold BI with an admin credential.

2. Click Settings in the left side menu.

   

3. Click Authentication and then OpenID Connect

   

4. Provide the following details in the OpenID Connect settings page of Bold BI application.

   Provider Name	It represents the name of the authentication provider to be displayed in the login page.
   Provider Logo	It represents the logo of the authentication provider to be displayed in the login page.
   Authority	It is the instance created for the user in the provider.
   Client ID	It is an unique identifier provided to each of the applications while registering in the providers.
   Client Secret	It is a secret key that is used to authorize the applications.
   Identifier	It is the property name that holds the email address of the user in the deserialized ID token.
   Logout Endpoint	It is an end point that logout the thrid-party provider.

   

If we need to import the OpenID Connect groups, we have to configure the group details while saving the OpenID authentication settings.

The previous mentioned similar steps are applicable to configure the OpenID support in User Management Server by logging into the URL {Bold BI URL}/ums/administration/sso?view=openid-settings with admin credential.

Following are the list of few OpenID Connect providers and that explains how to connect with the Bold BI application.

• Auth0
• Okta
• OneLogin

The OpenID Connect support is provided in both the Bold BI sites and User Management Server. This support can be handled for each sites individually in the settings page by disabling the option as in the following screenshot.

Set OpenID Connect as Default Authentication

OpenID Connect can be set as default authentication when OpenID Connect settings is enabled and saved. Follow these steps:

1. In settings page, click Authentication tab and select General.

2. Enable the Enable Default Authentication option and select the OpenID Connect in default authentication provider as in the following screenshot.

   

Disabling OpenID Connect Settings

When OpenID Connect is set as default authentication and try to disable the OpenID Connect settings to display the following pop-up. Proceeding by clicking Yes will disable the OpenID Connect default authentication.