Modify the user logon identity source for an application

更新时间:
复制 MD 格式

MobiNext lets you configure different types of identity sources to meet various authentication needs. This capability improves security and enables custom logon pages. This topic describes how to configure an OpenID Connect (OIDC) identity source in MobiNext using Alibaba Cloud IDaaS as an example. Alibaba Cloud IDaaS is a powerful identity management and authentication solution that helps enterprises achieve unified identity authentication. This integration lets you easily modify the identity source, enhance the security and convenience of MobiNext, and meet the requirements for custom logon pages.

Prerequisites

  1. Activate an instance for free

  2. Create an account

  3. Create an application

  4. Perform the first single sign-on

Configure the OIDC service

  1. Log on to the MobiNext console.

  2. Configure the identity source.

    Choose Users & Permissions > Identity Sources > Add Identity Source.

  3. The configuration type is set to OIDC.

  4. Configure OIDC.

    Map the MobiNext identity source OIDC fields to the IDaaS service fields.

    Field description

    Magic Pen field

    IDaaS

    Client ID

    Client Id

    General Configurations > client_id

    Client secret

    Client Secret

    General Configurations > client_secret

    Logon URL

    Authorization Url

    Logon Access > Application Configuration Information > Authorization Endpoint

    Token address

    Token Url

    Logon Access > Application Configuration Information > Token Endpoint

    User address

    User Info Url

    Logon Access > Application Configuration Information > User Info Endpoint

    Source address

    Issuer

    Logon Access > Application Configuration Information > Issuer

    Allowed protocols

    Scopes

    (Default: empty)

    Logoff URL

    Logout Url

    Logon Access > Application Configuration Information > Logout Endpoint

    This is the Magic Pen interface.

    IDaaS interface.

    Note

    In IDaaS, add the standard OIDC protocol. For more information, see Standard Protocols.

  5. Configure the Login Redirect URI.

    1. Copy the webhook address.

    2. Paste it into the Login Redirect URL field.

Modify the application setup

  1. Switch the identity source of the MobiNext application to OIDC.

    In the MobiNext designer, navigate to Settings > Logon Configuration > Default Identity Source, switch the source to oidc, and then republish the application.

Preview the application

  1. In the console, select the application.

  2. Click the application URL for the corresponding environment.

  3. This page confirms that the identity source has been switched to OIDC.