Content
View differences
Updated by Pavel Balashou over 1 year ago
**As** an OpenProject admin
**I want to** be able to configure OpenID provider using a user interface
**so that** I don't have to use a command line and can see potential errors more easily.
**Acceptance criteria**
* OpenID provider configurations are accessible under Administration -> Authentication -> OpenID providers
* The configuration form supports
* filling data from OpenID Discovery endpoint
* specific providers like Google and Entra
* For Google discovery endpoint is already known. Therefore the UX should be simplified.
* For Entra discovery endpoint can be constructed from tenant. By default it should be `common`. And use should be able to change tenant.
* custom provider
* In this case user should be able to enter OpenID Discovery endpoint explicitly.
These attributes can be obtained from the discovery endpoint.
endpoint.
* authorization\_endpoint
* userinfo\_endpoint
* token\_endpoint
* end\_session\_endpoint
* jwks\_uri
* issuer
These attributes can't. Admin has to fill it in manually:
* identifier
* secret
* display\_name
**I want to** be able to configure OpenID provider using a user interface
**so that** I don't have to use a command line and can see potential errors more easily.
**Acceptance criteria**
* OpenID provider configurations are accessible under Administration -> Authentication -> OpenID providers
* The configuration form supports
* filling data from OpenID Discovery endpoint
* specific providers like Google and Entra
* For Google discovery endpoint is already known. Therefore the UX should be simplified.
* For Entra discovery endpoint can be constructed from tenant. By default it should be `common`. And use should be able to change tenant.
* custom provider
* In this case user should be able to enter OpenID Discovery endpoint explicitly.
These attributes can be obtained from the discovery endpoint.
* userinfo\_endpoint
* token\_endpoint
* end\_session\_endpoint
* jwks\_uri
* issuer
These attributes can't. Admin has to fill it in manually:
* identifier
* secret
* display\_name