Configuring OIDC-Based SSO with Twocanoes XCreds

RapidIdentity Platform Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

You can integrate Twocanoes XCreds with RapidIdentity by configuring OIDC SSO in the RapidIdentity portal, then configuring XCreds to use RapidIdentity as the identity provider.

Requirements
  1. Navigate to your RapidIdentity administrator portal.
  2. In the top navigation bar, select Configuration.
  3. Click Security.
  4. In the left navigation pane, click Identity Providers > Federation Partners.
  5. Click Add Federation Partner and select OpenID Connect from the pop-up menu.
  6. In the General tab, configure general settings:
    1. Enter a name in the Name field.
    2. (Optional) Enter a description in the Description field.
    3. Enter https://127.0.0.1/xcreds in the Callback URLs field.
    4. (Optional) Update the default token expiration and refresh token settings.
    Note:

    After you save the federation partner, the Client ID and Client Secret will display under the Description field in the General tab. You must enter these values in XCreds when you complete the integration. For more information, see https://twocanoes.com/knowledge-base/xcreds-identity-provider-integration-guide/ (Twocanoes).

  7. (Optional) In the Attributes tab, add custom claim attributes:
    1. Click Add Attribute.
    2. In the pop-up menu, enter a value in the Name field and a value in the LDAP Attribute field.
    3. Click Add.
    Note:

    Standard claim attributes must be added in the Claim Attributes tab.

  8. (Optional) In the OpenID Connect Configuration tab, update the default encryption settings or add an RSA public key.
  9. In the Claim Attributes tab, add claims:
    1. Click Add Attribute.
    2. In the pop-up menu, add the following attributes using the values in the table below. Each table header represents a menu field.
      NameClaimClaim TypeAttribute Value TypeLDAP AttributeRegex FilterSingle ValuedBinary
      ProfileprofilestringldapemployeeTypeFalseFalse
      SNsnstringldapsnTrueFalse
      EmailemailstringldapmailTrueFalse
      First Namefirst_namestringldapgivenNameTrueFalse
      IDidstringldapidautoIDTrueFalse
      Note:

      Do not enter a value in the Regex Filter field.

    3. Click Add.
  10. Click Save in the lower-right corner of the screen.
  11. Reload the services:
    1. Navigate to Security > Identity Providers > IDP Configuration.
    2. Click Trigger Service Reload.
    3. Click Trigger Web Reload.
  12. Configure OIDC settings in Twocanoes XCreds to complete the integration. For instructions, see https://twocanoes.com/knowledge-base/xcreds-identity-provider-integration-guide/ (Twocanoes).
    Note:

    You must add the discovery URL to the XCreds configuration file. For more information, see OpenID Connect User Endpoints.

Users can authenticate using their RapidIdentity credentials when they access their device using Twocanoes XCreds.