Configure JGAS for OpenID Connect/OAuth2

Configure the JGAS for OpenID Connect/OAuth2 Single sign-on (SSO).

  1. You have created an account with an OpenID Connect/OAuth2 provider that will provide authentication services for you, for example, Google.
  2. If the JGAS is located behind a proxy, configure the proxy in the OpenID Connect fglprofile file in $FGLDIR/web_utilities/services/openid-connect/res.
    Remove the comment and set the correct value for the entry called proxy.http.location and proxy.https.location.
  3. Start your dispatcher (if not behind a Web server).

Genero OpenIdConnect service requires HTTPS communication with the IdP. If needed, you may have to configure SSL and CA authority in the fglprofile file. (See the Genero Business Development Language User Guide for details).

The JGAS is ready to use OpenID Connect/OAuth2 SSO to authenticate end users.