IDaaS Open Platform
Employee Identity (EIAM)

OAuth 2.0 Authentication Integration

Application DevelopmentClient Application

It is recommended that you integrate your application system through the OAuth 2.0 protocol authentication.

# Preparation

Enterprise administrators can refer to Configuring OAuth 2.0 Protocol Application SSO to create an OAuth 2.0 protocol application on the IDaaS Enterprise Center platform.

# Development Integration

After the application configuration is complete, please refer to the corresponding mode in OAuth 2.0 Protocol to complete the subsequent integration configuration.

# Demo Demonstration

# IDaaS Configuration

  1. Log in to the IDaaS administrator platform, add an OAuth 2.0 protocol application for client application integration. The authentication configuration is as follows. Enable the Implicit Grant mode separately. The callback address is: idaas://bamboocloud/sso/oauth (The idaas protocol can be used to launch the client application).
Note: The Authorization Code mode is recommended for production environments. The Demo demonstrated here uses only the Implicit Grant mode to ensure security, as there is no backend server.

  1. Obtain the authentication interface configuration for the tenant's OAuth 2.0 protocol. Open 【Settings - Service Configuration - OIDC】.
Save the following addresses, as they will be used in the subsequent client configuration.

# Client Configuration

  1. Open the client, select Oauth2, and add Oauth2 authentication configuration. The configuration content is as follows.

  1. Click SSO Login to simulate initiating an authentication request from the client.

  2. After successful login to IDaaS, the browser launches the client.

  1. The client listens to the callback address, obtains the access_token, retrieves user information through the pre-configured user info endpoint, and completes the OAuth 2.0 authentication.

  1. Click on the username to view user information details.

  1. Close the client to simulate initiating an authentication request from the browser.

  2. Open a browser, access the IDaaS User Center, and access the integrated IDaaS client application.

  3. The browser launches the client. The client listens to the callback address, completes OAuth 2.0 authentication, obtains user information, and completes client authentication.

OIDC Authentication Integration