Joget SSO with OpenID Connect

In this article, we will demonstrate how to configure OpenID on Joget using the OpenID Connect Manager Plugin.

1. Create an Auth0 account here.
2. Use whatever tenant you have available, in my case it is "dev-hprpdb0led4su3pm", but yours will be different.
3. From the dashboard, go to User Management > Users > Create User, and create a new user.
4. Then, based on Okta documentation, we will need to go to the discovery URL to extract the necessary information. For my case, it is https://dev-hprpdb0led4su3pm.jp.auth0.com/.well-known/openid-configuration.
5. From the discovery URL, copy the relevant values and paste it into the respective fields in Joget OpenID Connect Manager Plugin. First, set issuer to Custom.
   
   1. issuer → Issuer URL
   2. authorization_endpoint → Authorization Token Endpoint
   3. token_endpoint → Token Endpoint
   4. userinfo_endpoint → User Info Endpoint
   5. "openid profile email" → Scope
6. From the Application, copy the relevant values and paste it into the respective fields in Joget OpenID Connect Manager Plugin
   1. Client ID → Client ID
   2. Client Secret → Client Secret
7. From the Joget OpenID Connect Manager Plugin, copy the relevant values and paste it into the respective fields in the Application
   1. Callback URL → Allow Callback URLs
8. After setting up the OpenID Connect Provider Details, you will have to set up your SMTP, for detailed instructions on configuring the Email Tool, click here.
9. If you have configured the settings correctly, you should be met with these screen. 

Figure 1: Joget Login Screen: Pressing the "Login" button will redirect you to the next screen.

Figure 2: OpenID Login Screen

You may refer to the color coded images below to guide your configuration.

Figure 3: Plugin configuration

Figure 4: Discovery URL

Figure 5:  Application

Figure 6: Callback URLs

Notes:

• If you are a free user, you maybe limited to 3 licensed users, if so you may have to delete other users to accommodate for the user login.
• In the Joget System Settings > General Settings, set API Domain Whitelist  to * (IMPORTANT NOTE: If this is not set, you will get a 400 Forbidden error when performing the SSO).
• Download the plugin here.