Configuring Single Sign-On for FusionID - FusionID Documentation

FusionID Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Configure OpenID Connect (OIDC) single sign-on so users authenticate through your external identity provider and are provisioned in FusionID based on their assigned roles.

Requirements
  • Administrator access to your OIDC identity provider with permissions to create or modify application registrations.
  • Server access to update FusionID environment configuration files.
  • Administrator access to the FusionID.
  1. In your OIDC identity provider, create or update an application registration for FusionID with the required redirect URI and scopes.
  2. In the FusionID admin interface, navigate to System > Global Config.
  3. Locate the SSO Role Mappings section.
  4. Add one mapping entry for each role you want to support.

    For each entry, enter the Role ID returned by your identity provider, such as admin, and the corresponding FusionID role to assign, such as ROLE_FUSIONID_ADMIN.

  5. Click Save to save the Global Config object.
  6. Open a browser and navigate to your FusionID administrator URL, such as https://your-domain.com/admin.
  7. On the login page, click Login via SSO.
  8. When you are redirected to your identity provider, log in with a test account.

You are redirected back to FusionID and logged in with the expected roles assigned.