Open ID Connect Setup

Open ID Connect Setup

The following sections will cover important information needed to properly configure external OIDC providers like GitHub.

Redirect URI

The redirect URI you must provide to your identity provider is {host}/login/oidc/complete/{name}, where {host} is the public host of the application, configured using the external.host property. By default this value is "http://localhost:8080", and {name} is the name of the provider you configured in the repository. Please note that this value will be case-sensitive.

Auto configuration

For providers that provide a valid well-known endpoint, like Authentik, you can optionally provide the discovery URl, usually ending in /.well-known/openid-configuration, and click the button next to the text field to automatically fill the endpoint fields below (authorization, token and user-info).

GitHub example

• Create a new oauth app here.
• Set the authorization callback to your application, as discussed above
• Configure the provider in the repository, set the name to "GitHub", input the client id and secret
• Set the authorization endpoint to https://github.com/login/oauth/authorize
• Set the token endpoint to https://github.com/login/oauth/access_token
• And the user info endpoint to https://api.github.com/user
• Save the provider and go to the profile page to link your account.