6.2
Configuring the external authentication provider
6.2.1
Configuring without secret
Identity Service supports using an external authentication provider via OIDC (OpenID Connect)
protocol.
If this option is enabled, then the external authentication provider will be used by default.
Signing in at the default SINUMERIK Integrate 5.x login page is still possible, but the user has
to navigate to the login page manually.
Open the following URL on the server:
https://<SI5 server ip address>/int/
identity/account/login
Prerequisite
The SINUMERIK Integrate 5.x server has already been installed.
You require administrator rights on the server.
Parameter
Parameter / Description
Settings
Type
Value
ClientId
ClientId of the SI5 Identity Service, same value
as the ClientId of the "appsettings.produc‐
tion.json”
string
<clientId>
Redirection URLs
After a user successfully authenticates itself,
the authorization server will redirect the user
back to the application with either an authoriza‐
tion code or access token in the URL.
string
<SI5 server ip
address>:<port>/int/identity/
signin-oidc
Post Logout Redirect URIs
After a user successfully logged out from an ap‐
plication, the authorization server will redirect
the user back to this URL.
string
<SI5 server ip
address>:<port>/int/identity/
signout-callback-oidc
Scopes
Scopes are used by an application during au‐
thentication to authorize access to a user’s de‐
tails. We do not store user data.
string
profile, openid
Grant Types
Represents a user’s permission for the client to
access their data.
string
Authorization Code
Configuring the settings
6.2 Configuring the external authentication provider
Manage MyResources, Optimize MyProgramming /NX-Cam Editor
Installation Manual, 12/2019, A5E44672080B AE
135
