OIDC Providers
2 min
You can enable authentication through the OpenID Connect (OIDC) protocol to log in using your organization's identity provider. Belden Horizon Data Operations (BHDO) acts as an OIDC client that connects to a configured OIDC provider. BHDO supports both static and dynamic client registration.
The OIDC providers page allows you to:
- View the list of configured OIDC providers.
- Add, edit, and delete OIDC providers.
- Assign Role-Based Access Control (RBAC) groups to users authenticating through OIDC.
Important Note: When working with OIDC providers, remember that:
- OIDC provider configurations are included in system backups.
- Users can export and import configurations through templates.
- The assigned RBAC Groups determine user access levels upon authentication.
Required OIDC Scopes for Microsoft Entra ID
When configuring Microsoft Entra ID as an OIDC provider for BHDO, ensure the following standard scopes are enabled:
- openid
- profile
BHDO uses these scopes to authenticate users and retrieve basic identity information. No additional custom scopes or permissions are required.
Access OIDC Providers
Navigate to System > Access Control > OIDC Providers. Here you can:
- Add a provider See Add an OIDC Provider for details.
- Name View the identifier for the OIDC provider, for example, Keycloak or Okta.
- Client ID View the unique identifier for the client registered with the OIDC provider.
- RBAC Group(s) View user roles assigned via Role-Based Access Control (RBAC)
- Actions Access options to edit or delete an OIDC provider.
