OpenID Connect
FoxIDs supports OpenID Connect on both sides of an identity connection. Configure an OpenID Connect authentication method to trust an external OpenID Provider (OP), or configure an OpenID Connect application registration to let an application use FoxIDs for sign-in and token issuance.
It is recommended to use OpenID Connect Authorization Code flow with PKCE, because it is considered a secure flow.
Authentication method
Configure an OpenID Connect authentication method that trusts an external OpenID Provider (OP).
How to guides:
- Connect IdentityServer
- Connect Microsoft Entra ID
- Connect Azure AD B2C
- Connect Amazon Cognito
- Connect Google
- Connect Facebook
- Connect Signicat
- Connect Nets eID Broker
Application registration
Configure your application as an OpenID Connect application registration. The registration can also define API resources and scopes requested by the client.
Besides receiving an ID token the client can request an access token for multiple APIs defined as OAuth 2.0 application registration resources.
An OAuth 2.0 resource can optionally be defined in an OpenID Connect application registration or an OAuth 2.0 application registration.
How to guides:
- Connect Tailscale
Connect FoxIDs environments
FoxIDs environments can be connected in two ways:
- Environment Link for environments in the same tenant.
- OpenID Connect for environments in the same or different tenants.
Choose Environment Link when both environments are in the same tenant and you want the simplest setup. Choose OpenID Connect when you need to connect across tenants or across separate FoxIDs deployments.