OpenID Connect

FoxIDs support OpenID Connect as both authentication method and application registration.

It is recommended to use OpenID Connect Authorization Code flow with PKCE, because it is considered a secure flow.

Authentication method

Configure OpenID Connect authentication method which trust an external OpenID Provider (OP).

How to guides:

• Connect IdentityServer
• Connect Microsoft Entra ID
• Connect Azure AD B2C
• Connect Amazon Cognito
• Connect Google
• Connect Facebook
• Connect Signicat
• Connect Nets eID Broker

Application registration

Configure your application as a OpenID Connect application registration.

Besides receiving an ID token the client can request an access token for multiple APIs defined as OAuth 2.0 application registration resources.
An OAuth 2.0 resource can optionally be defined in a OpenID Connect application registration or a OAuth 2.0 application registration.

How to guides:

• Connect Tailscale

Connect FoxIDs environments

FoxIDs environments can be connected in two ways:

• Environment Link for environments in the same tenant.
• OpenID Connect for environments in the same or different tenants.

Choose Environment Link when both environments are in the same tenant and you want the simplest setup. Choose OpenID Connect when you need to connect across tenants or across separate FoxIDs deployments.