Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision | |||
| en:2.0:single_sign_on:oidc_dokuwiki [2026/09/09 17:48] – [Setting up the Client (SP) in Admidio] kainhofer | en:2.0:single_sign_on:oidc_dokuwiki [2026/09/10 14:09] (current) – [Quick Overview] kainhofer | ||
|---|---|---|---|
| Line 28: | Line 28: | ||
| * In **Admidio**, | * In **Admidio**, | ||
| * Choose an easily understood **label for the client** (only used in Admidio' | * Choose an easily understood **label for the client** (only used in Admidio' | ||
| - | * Enter the **ClientID from the RP**, copy the created Client Secret (you will later need to paste it indo DokuWiki' | + | * Enter the **ClientID from the RP**, copy the created Client Secret (you will later need to paste it into DokuWiki' |
| * Many open source OIDC clients do not support encryption (PKCE, which is a security mechanism that prevents attackers from obtaining access unless their application started the initial login). By default, PKCE is required by Admidio, so in this case make sure that the requirement checkbox is turned off. Otherwise you will get an error. | * Many open source OIDC clients do not support encryption (PKCE, which is a security mechanism that prevents attackers from obtaining access unless their application started the initial login). By default, PKCE is required by Admidio, so in this case make sure that the requirement checkbox is turned off. Otherwise you will get an error. | ||
| * Optionally select (both in Admidio and the RP) which **profile fields should be mapped** to OpenID claims (attributes) and sent to the client, and configure which **group memberships** should be transmitted. | * Optionally select (both in Admidio and the RP) which **profile fields should be mapped** to OpenID claims (attributes) and sent to the client, and configure which **group memberships** should be transmitted. | ||