OIDC

PhenixID server can act as an OIDC OP. 

The config UI allows for simplified configuration. Although not all configuration parameters for the OIDC OP is available through the guide scenario, most are.  

Discovery

Once a scenario has been created, the OIDC discovery URL is automatically generated. 

Dependant if multiple authentication scenarios has been performed the url differs a bit. 

If only one OIDC authentication has ben set up the URL to discovery data is:

<hostname/ip_address>/.well-known/openid-configuration

When multiple authenticators are configured the URL is:

<hostname/ip_address>/<tenant_id>.well-known/openid-configuration


Customizing discovery content is done by clicking the Advanced tab -> OIDC_OP.

More information

For more information about how PAS works as an OpenID Provider, please see the article OpenID Provider in PAS 5.1 and beyond