Manitou Single Sign-on - Manitou Web Client Setup

Web.config

For more information about where to find the IDP information see Ping Identity and Azure.

OidcAuthority - This is the base website for the Open ID Connect integration of the Identity Provider. For Azure, it's https://login.microsoftonline.com/{tenant}/v2.0. The {tenant} can be found in your Azure application in the overview section. For Ping Identity it's https://auth.pingone.com/{id}/as. The whole URI can be found in your Ping Identity application in the configuration section as ISSUER. Both {tenant} and {id} are usually GUIDs.

OidcClientId - This is the client ID assigned to your application that was created in the IDP.

OidcRedirectUri - This is the redirect URI you entered in your application that was created in the IDP. The redirect URI is where the IDP should redirect your browser after authentication has occurred. This would be like https://{webSite}/Manitou/Login?ws=1. Mine is https://dev-12.boldgroup.int/Manitou/Login?ws=1. This needs to be configured in your IDP application.

OidcLogoutRedirectUri - This is where the IDP should redirect your browser after you've logged out of the IDP. This would typically be like https://{webSite}/Manitou/Login. Mine is https://dev-12.boldgroup.int/Manitou/Login. This may need to be configured in your IDP application.

OidcDescription - This is the description of the IDP that will show on the login screen as a login option.

Troubleshooting

On the web.config there is a section that is commented out:

If you uncomment this and save it, get log information in the file "ClientTextWriterOutput.log" in the directory where the client is hosted in IIS.

NOTE: If you uncomment this then it should be commented back out when you are done and delete the log file as it contains personal information.