README_EN

An OpenID Connect provider for UCS. Based on <a href="https://github.com/Kopano-dev/konnect">Kopano Konnect</a>.
<br>
<br>
Configuration options for services can be retrieved via HTTPS protocol on the hostname that is configured in the app settings under the path /.well-known/openid-configuration. The default value after installing the app on a DC master and backup is https://ucs-sso.<UCS-domainname>/.well-known/openid-configuration. On other server roles, the meta information is available directly via the hostname.
<br>
<br>
New services can be added in UMC LDAP browser module: In the container 'univention' and 'oidc', a new 'OpenID Connect relying party service' object can be added. Additionally, the udm command can be used:
<pre>
 
udm oidc/rpservice create --set name=&lt;internal_name&gt;<internal_name\> \
    --position cn=oidc,cn=univention,$(ucr get ldap/base) \
    --set clientid=&lt;client_identifier&gt;<client_identifier\> \
    --set clientsecret=&lt;averylongpassword&gt;<averylongpassword\> \
    --set trusted=yes \
    --set applicationtype=web \
    --set redirectURI=&lt;URL_from_client_documentation&gt;<url_from_service_documentation\>
</url_from_service_documentation\></averylongpassword\></client_identifier\></internal_name\>
</pre>
Logs for the provider can be found in the app container's docker logs:
<pre>
univention-app logs openid-connect-provider
</pre>