Single Sign-On(SSO) with OpenID Connect authentication

The Bold Reports application can be configured with OpenID Connect for Single Sign-On (SSO), so that the users can log in directly to Bold Reports application after authenticating using the OpenID Connect.

Prerequisites

1. An account with an OpenID Connect provider.
2. Register the Bold Reports application in the OpenID Connect provider.

Steps to configure OpenID Connect in Bold Reports

1. To configure the OpenID Connect connection details, click the settings option in the Report Server left-side panel.
2. Navigate to the Authentication tab and OpenID Connect as shown in the following image

3. Provide the following details in the OpenID Connect settings of Bold Reports application.

   Provider Name	It represents the name of the authentication provider to be displayed in the login page.
   Provider Logo	It represents the logo of the authentication provider to be displayed in the login page.
   Authority	It is the instance created for the user in the provider.
   Client ID	It is an unique identifier provided to each of the applications while registering in the providers.
   Client Secret	It is a secret key that is used to authorize the applications.
   Identifier	It is the property name that holds the email address of the user in the deserialized ID token.

   

The previous mentioned similar steps are applicable to configure the OpenID Connect in User Management Server by logging into the URL {Bold Reports URL}/ums/administration/authentication with admin credential.

Following are the list of few OpenID Connect providers and that explains how to connect with the Bold Reports application.

• Auth0
• Okta
• OneLogin

The OpenID Connect is provided in both the Bold Reports sites and User Management Server. OpenID Connect can be handled for each sites individually in the settings page by disabling the option as in the following screenshot.

Set OpenID Connect as Default Authentication

OpenID Connect can be set as default authentication when OpenID Connect settings is enabled and saved. Follow the below steps.

1. In settings page, click on Authentication tab and select General.
2. Enable the option Enable Default Authentication and select the OpenID Connect in default authentication provider as in the following screenshot.

Disabling OpenID Connect Settings

When OpenID Connect is set as default authentication and try to disable the OpenID Connect settings will display below pop-up. Proceeding by clicking Yes will disable the OpenID Connect default authentication.

Bypassing OpenID Connect Authentication

Use the below custom login URL to login as normal user that is not from OAuth, when OpenID Connect default authentication is enabled.

{Bold Reports URL}/reporting/site/{tenant-name}/login?use_default_authentication=false