ITDR
Configuring OpenID for Single Sign-On
Zscaler recommends that you use the ZIdentity Admin Portal to configure primary and secondary external identity providers (IdPs). ZIdentity supports both SAML and OpenID configurations. Contact Zscaler Support to subscribe to ZIdentity.
This article provides information on how to configure OpenID for single sign-on (SSO) in the Zscaler ITDR Admin Portal.
Before you configure OpenID for SSO, obtain the following details for the identity provider (IdP):
- Client ID
- Client Secret
- Issuer
- Authorization Endpoint
- Token Endpoint
- JSON Web Key Set (JWKS)
To learn more, see Configuring OpenID for Single Sign-On Using Okta and Configuring OpenID for Single Sign-On Using Google.
To configure OpenID for SSO:
- Go to Settings > Users & Roles > SSO.
Click Add Provider, and select OpenID from the drop-down menu.
- In the OpenID Provider Details window:
- Name: Enter a name for the OpenID integration.
- Enabled: Select to enable the OpenID SSO provider.
- Use Proxy Settings: Enable if the ITDR Admin Portal requires a proxy to connect to the OpenID SSO servers. This toggle is optional if you are using a SaaS-hosted version of ITDR.
- Client ID: Enter the client ID you obtained from your IdP.
- Client Secret: Enter the client secret you obtained from your IdP.
Endpoints: Enter the endpoint configuration details that you obtained from the file:
- Issuer: Enter the issuer URL obtained from your IdP.
- Authorization Endpoint: Enter the authorization endpoint URL obtained from your IdP.
- Token Endpoint: Enter the token endpoint URL obtained from your IdP.
- JWKS URI: Enter the JWKS URI obtained from your IdP.
- Click Save.
After the configuration, sign in to the ITDR Admin Portal. You will see the identity provider's login button. Sign in with the OpenID provider to verify if the integration is successful.
