<br>

**As** an OpenProject admin
**I want to** be able to configure OpenID provider using a user interface
**so that** I don&#39;t have to use a command line and can see potential errors more easily.

**Acceptance criteria**

* **Navigation**

* OpenID provider configurations are accessible under Administration -&gt; Authentication -&gt; OIDC providers

* **Index page**

* When no OIDC providers are setup show a BlankSlate

* When OIDC providers are setup show all complete and incomplete OIDC providers

* Show name, type, users, &quot;created by&quot; and &quot;created on&quot;

* When a provider is incomplete Begin of the insertion(see below required fields)End of the insertion show the &quot;incomplete&quot; tag

* **Add Button**

* The admin can add a new OIDC provider&quot; by clicking on the &quot;Add OIDC provider&quot; button

* This button is a drop down like for adding a storage

* The dropdown shows following options

* Google

* Microsoft Entra

* Custom

* **Create form**

* Begin of the deletion Overview

* All sections are editable in the creation form

* End of the deletion Basic details

* Begin of the insertionNameEnd of the insertion Begin of the deletion Name, required andEnd of the deletion needs to be filled by admin

* Automatic configuration

* The user should be able to optionally use a Discovery endpoint

* After entering the URL, the form will fetch data from the OpenID Discovery endpoint

* After getting a successful response the form copies the fetched values into the form (see attributes above)

* After a unsuccessful response show an error message

* This endpoint will fill the inputs in the next section (Advanced configuration) Begin of the insertion

End of the insertion Begin of the deletion

End of the deletion * Advanced configuration Begin of the insertion

End of the insertion Begin of the deletion

End of the deletion * Show a info box when the information was supplied through automatic configuration Begin of the insertion

End of the insertion Begin of the deletion

End of the deletion * The inputs are editable Begin of the insertion

End of the insertion Begin of the deletion

End of the deletion * All inputs Begin of the insertion

End of the insertion Begin of the deletion

End of the deletion * authorization\_endpoint Begin of the insertion(required)

End of the insertion Begin of the deletion

End of the deletion * userinfo\_endpoint Begin of the insertion(required)

End of the insertion Begin of the deletion

End of the deletion * token\_endpoint Begin of the insertion(required)

End of the insertion Begin of the deletion

End of the deletion * end\_session\_endpoint Begin of the insertion

End of the insertion Begin of the deletion

End of the deletion * jwks\_uri Begin of the insertion

End of the insertion Begin of the deletion

End of the deletion * issuer Begin of the insertion(required)

End of the insertion Begin of the deletion

End of the deletion * optiional logo Begin of the insertion

End of the insertion Begin of the deletion

End of the deletion * Client Details

* Admin needs to fill &quot;Client ID&quot; and &quot;Client Secret&quot;

* &quot;Limit self-registration&quot; is optional

* Attribute mapping

* Optional definition of attributes in userinfo endpoint to map to OpenProject attributes

* login, email, first and last names

* When &quot;Google&quot; was chosen

* The Google discovery endpoint is already known. Therefore the UX should be simplified.

* Automatic and Advanced configuration sections are not shown

* When &nbsp;&quot;Entra&quot; was chosen

* An extra input called Tenant&quot; (string - default value &quot;common&quot;) is shown in &quot;Basic details&quot;

* Entra discovery endpoint can be constructed from tenant. By default it should be `common`.

* Admin should be able to change tenant.