Manual provider setup

Manual configuration requires knowledge about the IdP software being used and is out of the scope of this documentation. The parameters required to be set are:

  • Client ID
  • Client Secret
  • Authorization endpoint
  • Token endpoint
  • UserInfo endpoint
  • VDV Redirect URL
  • Scopes
  • Unique Id
  • E-Mail field

It is also recommended to set:

  • JWKS URI
  • ID Token signing algorithms
JWKS and ID Token signing algorithms must be set for token verification to work.

Claims mapping

Name

Type

Default mapping

Description

Unique ID

string

IDToken.oid

Unique user ID, this claim is used to check if the user exists in VDV

Username

string

IDToken.preferred_username

Username, set to email if not found

E-Mail

string

UserInfo.email

E-Mail

Name

string

UserInfo.name

Name, set to email if not found

Role

string[]

IDToken.roles

User role ID, the role must be assigned to the organization

Owner

string[]

Array of project IDs to assign to the user, the projects must be owned by the organization

Admin

bool|int|string

User is set as admin if this field is not empty

Unique ID and E-Mail claims are always required and either Role or Owner must be set, everything else is optional.
Only a single organization can enable admin mapping.

How did we do?

Single Sign-On setup checklist

Contact Support