Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Today, Admin App supports only forms-based authentication for using the application.  This design proposes adding another method of delegating user-authentication to trusted 3rd party-sources via OpenID Connect, to provide single-sign on like experiences to users of Ed-Fi tools.  If this design, implemented code and pattern is successful in Admin App, it will be considered for reuse in applications such as Data Import.

Registering client application with external authentication providers:

Client application needs to be registered to an external authentication provider, in order to delegate the user authentication process.

...

Note: Similarly, Admin App should be registered with custom OIDC authentication provider for availing client_key and client_secret secret.

OIDC authentication flow on Admin App: