Single Sign-On(SSO) with OAuth 2.0 authentication in Bold Reports

The Bold Reports application can be configured with OAuth 2.0 for Single Sign-On(SSO), so that the users can log in directly to Bold Reports application after authenticating using the OAuth 2.0.

Prerequisites

1. An account with an OAuth 2.0 provider.
2. Register the Bold Reports application in the OAuth 2.0 provider.

Steps to configure OAuth 2.0 in Bold Reports

1. To configure the OAuth 2.0 connection details, click the settings option in the Report Server left-side panel.
2. Navigate to the Authentication tab and OAuth 2.0 as shown in the following image

3. Provide the following details in the OAuth 2.0 settings of Bold Reports application.

   Provider Name	It represents the name of the authentication provider to be displayed in the login page.
   Provider Logo	It represents the logo of the authentication provider to be displayed in the login page.
   Authorization Endpoint	It is the endpoint in the provider to authorize the user.
   Token Endpoint Method	It represents the request type to access the token endpoint.
   Token Endpoint	It is the endpoint in the provider that generates the token.
   User Information Endpoint Method	It is the endpoint in the provider used to get the user details.
   User Information Endpoint	It represents the request type to access the user information endpoint.
   Client ID	It is an unique identifier provided to each of the applications while registering in the providers.
   Client Secret	It is a secret key that is used to authorize the applications.
   Scopes	It is comma separated lists of identifiers that specifies the access privileges that are being requested from the provider.
   Email	This must be the email of an admin account of the providers.

   

The previous mentioned similar steps are applicable to configure the OAuth 2.0 in User Management Server by logging into the URL {Bold Reports URL}/ums/administration/authentication with admin credential.

Following are the list of few OAuth 2.0 providers and that explains how to connect with the Bold Reports application.

• Amazon Cognito
• Auth0
• Okta
• OneLogin

The OAuth 2.0 is provided in both the Bold Reports sites and User Management Server. OAuth 2.0 can be handled for each sites individually in the settings page by disabling the option as in the following screenshot.

Set OAuth 2.0 as Default Authentication

OAuth 2.0 can be set as default authentication when OAuth 2.0 settings is enabled and saved. Follow the below steps.

1. In settings page, click on Authentication tab and select General.
2. Enable the option Enable Default Authentication and select the OAuth 2.0 in default authentication provider as in the following screenshot.

Disabling OAuth 2.0 Settings

When OAuth 2.0 is set as default authentication and try to disable the OAuth 2.0 settings will display below pop-up. Proceeding by clicking Yes will disable the OAuth 2.0 default authentication.

Bypassing OAuth 2.0 Authentication

Use the below custom login URL to login as normal user that is not from OAuth, when OAuth 2.0 default authentication is enabled.

{Bold Reports URL}/reporting/site/{tenant-name}/login?use_default_authentication=false