Skip to main content

Add OpenID Connect identity providers to an Aiven Runtime application Limited availability

You can give users access to an Aiven Runtime application through identity providers (IdPs) that support OpenID Connect (OIDC).

note

Aiven handles authentication and blocks unauthenticated traffic at the platform level. If your backend needs to identify the logged-in user, read the identity passed in the X-Forwarded-User HTTP header.

Step 1: Register an app in your identity provider​

  1. Open the console for your identity provider in another tab.
  2. In your identity provider, register a new app.
  3. Add the scopes openid, profile, and email.
  4. Copy the Issuer/Provider URL, Client ID, and Client secret.

Step 2: Add your identity provider to your Aiven Runtime application​

  1. In the Aiven Console, go to your Runtime application and click Identity providers.
  2. Click Add identity provider.
  3. Select OpenID Connect (OIDC) and click Next.
  4. Enter a name, and paste the Issuer/Provider URL, Client ID, and Client secret you copied from your identity provider.
  5. Click Add.
  6. In the Provider configuration section, copy the Redirect URI.

Step3: Add the redirect URL to your application​

In your identity provider's console, add the Redirect URI you copied from the Aiven Console.

Step 4: Grant access to users​

After the IdP is added, the application is no longer publicly accessible. To give users access the application through the IdP, grant users and groups access.