| Info |
|---|
Through custom SSO, you can conveniently add the required IdPs according to your own needs. Currently, we support the common IdPs based on OpenID Connect. The following will take the well-known KeyCloak as an example to illustrate the detailed configuration. |
| Table of Contents | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
...
SSO Application--Customize (OIDC)
Login to your KeyCloak portal.
Click Create Realm to create a realm.
...
Go to https://{your_keycloak_domain}/realms/{realmname}/.well-known/openid-configuration to get URL information for CX system connection.
...
In the Scope input box, you can fill in Openidopenid,profile,email.
| Note |
|---|
|
...
|
...
|
...
|
...
Select the tenants that will be allowed to use this custom application for SSO login.
...
If you select Allow the system administrator to use this connection, the system administrator and other tenants who do not have subdomains enabled can use this custom application.
Turn on the Application and then click Save.
Single Sign-On Using
Click User Avatar, and select Edit Profile > Security Setting
Select KeyCloak and click Connect button.
...
If you have been bound to the KeyCloak account, you can log in the platform by KeyCloak account directly.
...
| Info |
|---|
Note: When accessing for the first time, if you log in via the login page instead of the User Settings, you will be required to link an account once you establish a connection with a third-party application. |