open-vault/website/source/docs/auth/jwt_oidc_providers.html.md

layout	page_title	description
docs	OIDC Provider Setup - Auth Methods	OIDC provider configuration quick starts

OIDC Provider Configuration

This page collects high-level setup steps on how to configure an OIDC application on various providers. Corrections and additions may be submitted via the Vault Github repository.

Auth0

1. Select Create Application (Regular Web App).
2. Configure Allowed Callback URLs.
3. Copy client ID and secret.
4. If you see Vault errors involving signature, check the application's Advanced > OAuth settings and verify that signing algorithm is "RS256".

Gitlab

1. Visit Settings > Applications.
2. Fill out Name and Redirect URIs.
3. Making sure to select the "openid" scope.
4. Copy client ID and secret.

Google

Main reference: Using OAuth 2.0 to Access Google APIs

1. Visit the Google API Console.
2. Create or a select a project.
3. Create a new credential via Credentials > Create Credentials > OAuth Client ID.
4. Configure the OAuth Consent Screen. Application Name is required. Save.
5. Select application type: "Web Application".
6. Configured Authorized Redirect URIs.
7. Save client ID and secret.

Okta

1. Make sure an Authorization Server has been created.
2. Visit Applications > Add Application (Web).
3. Configure Login redirect URIs. Save.
4. Save client ID and secret.