Configuring The External Authentication Provider; Configuring Without Secret - Siemens SINUMERIK 840D Installation Manual

6.2

Configuring the external authentication provider

6.2.1

Configuring without secret

Identity Service supports using an external authentication provider via OIDC (OpenID Connect)
protocol.
If this option is enabled, then the external authentication provider will be used by default.
Signing in at the default SINUMERIK Integrate 5.x login page is still possible, but the user has
to navigate to the login page manually.
Open the following URL on the server: https://<SI5 server ip address>/int/
identity/account/login
Prerequisite
The SINUMERIK Integrate 5.x server has already been installed.
You require administrator rights on the server.
Parameter
Parameter / Description
ClientId
ClientId of the SI5 Identity Service, same value
as the ClientId of the "appsettings.produc‐
tion.json"
Redirection URLs
After a user successfully authenticates itself,
the authorization server will redirect the user
back to the application with either an authoriza‐
tion code or access token in the URL.
Post Logout Redirect URIs
After a user successfully logged out from an ap‐
plication, the authorization server will redirect
the user back to this URL.
Scopes
Scopes are used by an application during au‐
thentication to authorize access to a user's de‐
tails. We do not store user data.
Grant Types
Represents a user's permission for the client to
access their data.
Manage MyResources, Optimize MyProgramming /NX-Cam Editor
Installation Manual, 12/2019, A5E44672080B AE
6.2 Configuring the external authentication provider
Settings
Type Value
string
<clientId>
string
<SI5 server ip
address>:<port>/int/identity/
signin-oidc
string
<SI5 server ip
address>:<port>/int/identity/
signout-callback-oidc
string
profile, openid
string
Authorization Code
Configuring the settings
135