Configure external authentication providers

Navigate to /RoleManager URL then click the Authentication Providers menu.

RoleManager can integration to any external provider that supports:

• OpenID Connect (oidc), or
• ADFS

Prerequisites

• Complete application registration in the respective authentication provider, e.g. configure redirect_URL, rely_party;
• Request credentials for connecting to the authentication provider, e.g. client_id, client_secret;
• Setup claims mapping at the authentication provider if required.

Adding an authentication provider

1. Click the Create New button, enter the name and display name of the provider. The name has to be unique and starts with a letter without space, e.g. AzureAD, then click the Next button:
   • For ADFS, the name must be WsFederation;
   • For other providers, give it a unique name.
2. Enter the configuration JSON applicable for the authentication provider. See below list for the applicable provider.
3. Select the applicable status:
   • Is Active - RoleManager only interact with active providers;
   • Is Interactive - RoleManager displays a button for each interactive provider on the log in page so the user can use the external account to log in;
   • Is Default - RoleManager automatically redirects the user to the default authentication provider's login page, i.e. the user does not need to select which provider to log on.

If a source system is non-oidc compatible but is able to automatically map users, then use the following settings to configure a place-holder provider to support it:

• Configuration JOSN: {"clientid":"na", "callbackpath":"/na", "configuration":{} }
• Status: Is Active = false, Is Interactive = false; Is Default = false;

External authentication provider configuration requirement