OpenID Connect

Overview

Add any OpenID Connect provider, such as your own account system, Auth0, Okta or Keycloak, as a social login. Readers click your login button, sign in with the provider, and come back logged in to UniSignIn. This is for your readers; for staff signing in to the dashboard, see SAML.

Connect

Only the account owner and Super Administrators can change social login settings, see Team and Roles.

1. In your provider, create an application (client) that uses the authorization code flow. Its redirect URI is your UniSignIn login page address followed by /auth, e.g. https://account.example.com/auth.
2. Go to Features > Account Center > Authentication and make sure Enable Social Login is on.
3. Go to Features > Account Center > Social Login, turn on Enable, select OpenID Connect, and turn on its Enable.
4. Enter the Issuer URL of your provider, e.g. https://auth.example.com. UniSignIn reads the rest of the provider's settings from it.
5. Enter the Client ID and Client Secret from your provider.
6. Enter a Button label, e.g. "Continue with Example".
7. Click Save Changes.

To make it the only way to log in, turn off email and password login and email codes under Features > Account Center > Authentication, and keep OpenID Connect as the only social login.

Use it

• The button appears on the login and sign-up pages of your websites, whichever login choice you use. It isn't shown in mobile apps.
• Readers are matched by email address. A reader logs in only when the provider confirms that their email address is verified.
• To save other details from the provider to readers' profiles, such as their company, contact us.