Configuring OIDC-Based SSO with Seesaw

RapidIdentity Platform Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

To enable OIDC SSO for authentication in Seesaw, you must configure a federation partner in the RapidIdentity portal.

Requirements

A tenant administrator account in RapidIdentity

  1. Navigate to your RapidIdentity administrator portal.
  2. In the top navigation bar, select Configuration.
  3. Click Security.
  4. In the left navigation pane, click Identity Providers > Federation Partners.
  5. Click Add Federation Partner and select OpenID Connect from the pop-up menu.
  6. In the General tab, configure the following settings:
    1. Enter a name in the Name field.
    2. (Optional) Enter a description in the Description field.
    3. Enter https://app.seesaw.me/api/auth/oidc/authorize/code in the Callback URLs field.
    4. (Optional) Update the default token expiration and refresh token settings.
    Note:

    After you save the federation partner, the Client ID and Client Secret will display under the Description field in the General tab. You must enter these values in Seesaw when you complete the integration. For more information, see Configuring OIDC-Based SSO in Seesaw.

  7. (Optional) In the Attributes tab, add custom claim attributes:
    1. Click Add Attribute.
    2. In the pop-up menu, enter a value in the Name field and an attribute in the LDAP Attribute field.
    3. Click Add.
    Note:

    Standard claim attributes must be added in the Claim Attributes tab.

  8. (Optional) In the OpenID Connect Configuration tab, update the default encryption and security settings.
  9. In the Claim Attributes tab, add the claims found in the table below:
    1. Click Add Attribute.
    2. In the pop-up menu, add the following attributes (each table header represents a menu field):
      NameClaimClaim TypeAttribute Value TypeLDAP AttributeRegex FilterSingle ValuedBinary
      EmailemailstringLDAPmailTrueFalse
      Email Verifiedemail_verifiedstringLDAPmailTrueFalse
      Family NamesnstringLDAPsnTrueFalse
      Given Namegiven_namestringLDAPgivenNameTrueFalse
      PicturepicturestringLDAPidautoPersonPhotoURLTrueFalse
      Note:

      Do not enter a value in the Regex Filter field.

    3. Click Add.
  10. Click Save in the lower-right corner of the screen.
  11. Reload the services:
    1. Navigate to Security > Identity Providers > IDP Configuration.
    2. Click Trigger Service Reload.
    3. Click Trigger Web Reload.