6.3 Configuring other types of identity provider

MyID supports any external identity provider that conforms to OpenID Connect (see section 6.2, Configuring OpenID Connect), but also provides streamlined configuration for specific types of identity provider where there is a class to support their configuration.

For example:

• Google

  Instead of using the OpenIdConnectOptions section in your configuration file, you can use GoogleOptions, which is preconfigured for a Google external identity provider.

  In most situations, you need only set the following options:

  • ClientId

  • ClientSecretEncrypted (or ClientSecret)

  When setting the redirect URI in the external identity provider, use:

  https://<server>/web.oauth2/signin-google

  Where:

  • <server> is the address of your MyID web server.

  For example:

  https://myid.mydomain.com/web.oauth2/signin-google

  For a full list of configuration options, see:

  learn.microsoft.com/en-us/dotnet/api/microsoft.aspnetcore.builder.googleoptions?view=aspnetcore-1.1&viewFallbackFrom=aspnetcore-8.0

Mapping attributes works in the same way for all identity providers; see section 6.4, Mapping attributes.