> For the complete documentation index, see llms.txt.
Skip to main content

Check out Port for yourself ➜ 

OIDC

This documentation describes the process of integrating an OIDC application with Port, along with some examples for specific identity providers. In order to integrate Port with an OIDC SSO application, you will need to do the following:

  1. Create a new OIDC application in your identity provider and provide an app integration name, like Port.
  2. Configure the application with the following details:

    • Redirect URI: https://auth.getport.io/login/callback

    • Login URI:

      Set authorization endpoint based on account region

      Port exposes two API instances, one for the EU region and one for the US region. Use the correct endpoint based on your account region, replacing company-<companyID>-SSO with your actual connection name.

      To find your connection name: open the Credentials modal, go to the Organization tab, and copy the Company ID. Use only the ID portion. For example, if your Company ID is company_123456789, your connection name is company-123456789-SSO.

      https://auth.getport.io/authorize?response_type=token&client_id=96IeqL36Q0UIBxIfV1oqOkDWU6UslfDj&connection=company-<companyID>-SSO&redirect_uri=https%3A%2F%2Fapp.port.io
  3. Expose the application to your organization by either granting access to everyone or restricting it to specific roles.
  4. When prompted during the Port self-serve SSO setup flow, provide the following details:
    • The Client ID for your OIDC application.
    • The Client Secret for your OIDC application.
    • The OpenID Provider Configuration Endpoint for your OIDC application.
  5. Add a custom property email_verified and configure the OpenID Claims in your identity provider to ensure that Port receives the value true for this attribute as part of the connection process.
  6. Configure the Groups claim in the OpenID Connect Token settings to enable automatic groups or roles support in Port.

    Groups claim is optional

    This step is OPTIONAL and is required only if you wish to pull all of your groups or roles into Port inherently.