{"id":325,"date":"2026-05-19T08:34:34","date_gmt":"2026-05-19T08:34:34","guid":{"rendered":"https:\/\/www.hexnode.com\/help\/idp\/?p=325"},"modified":"2026-05-28T06:31:33","modified_gmt":"2026-05-28T06:31:33","slug":"configure-oidc-single-sign-on-apps","status":"publish","type":"post","link":"https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/","title":{"rendered":"How to Configure OIDC Single Sign-On for Apps?"},"content":{"rendered":"<p>This article provides a comprehensive overview of the OpenID Connect (OIDC) protocol and offers a step-by-step guide to configuring an OIDC enterprise application within Hexnode IdP. <\/p>\n<h2>Understanding OIDC Authentication <\/h2>\n<p>OpenID Connect (OIDC) is a modern, lightweight authentication protocol built as an identity layer on top of the OAuth 2.0 authorization framework. While OAuth 2.0 was originally designed purely for delegating access (authorization), OIDC extends it to securely verify who the user is (authentication). <\/p>\n<p>At the core of an OIDC transaction is the <strong>JSON Web Token (JWT)<\/strong>. When a user logs in, the Identity Provider validates their credentials and issues a digitally signed JWT (specifically, an ID Token) to the client application. This token contains verified claims about the user&#8217;s identity, allowing the application to securely establish a session without ever seeing or storing the user&#8217;s actual password. <\/p>\n<h2>OpenID Connect in Hexnode IdP <\/h2>\n<p>Within your identity architecture, Hexnode IdP acts as the authoritative Identity Provider (IdP). When an application is integrated with Hexnode IdP using the OIDC protocol, traditional session-based authentication methods are replaced with secure, token-based communication. <\/p>\n<p>Instead of authenticating directly against the application, the application redirects users to Hexnode IdP. Hexnode IdP securely handles the credential verification process. Upon successful login, it redirects the user back to the Service Provider (the client application) alongside signed JSON Web Tokens. This standardized process ensures that identity data is transmitted securely while maintaining seamless compatibility with contemporary development frameworks. <\/p>\n<h2>When to Use OIDC Authentication <\/h2>\n<p>OIDC is the preferred standard for modern application development. Because it utilizes lightweight JSON formatting and the robust OAuth 2.0 framework, it is highly efficient and developer friendly. <\/p>\n<p>You should choose OIDC authentication when deploying: <\/p>\n<ul>\n<li><strong>Single-Page Applications (SPAs)<\/strong>: Browser-based front-end architectures built with frameworks like React, Angular, or Vue heavily rely on OIDC for secure token management without traditional backend session states. <\/li>\n<li><strong>Mobile and Native Apps<\/strong>: OIDC is optimized for mobile environments, easily securely issuing and refreshing tokens for iOS, Android, or desktop applications. <\/li>\n<li><strong>Modern API Architectures<\/strong>: When your infrastructure relies on microservices and API gateways, OIDC provides the ideal token-driven authentication layer to secure backend communications. <\/li>\n<\/ul>\n<h2>Configure OIDC SSO for apps from Hexnode IdP <\/h2>\n<p>The following steps outline how to initialize an OIDC application, define its security parameters and token behaviours, and finalize the integration in Hexnode IdP. <\/p>\n<h3>Step 1: Initialize the Application <\/h3>\n<p>First, create the application container within the portal. <\/p>\n<ol>\n<li>Log in to the <strong>Hexnode IDP<\/strong> portal. <\/li>\n<li>Navigate to <strong>Applications &gt; MyApps<\/strong>. <\/li>\n<li>Click <strong>+ Add Apps<\/strong>. <\/li>\n<li>Select <strong>OIDC<\/strong> as the protocol. <\/li>\n<li>Click the edit icon next to <em>Untitled Application<\/em> to rename the application. <\/li>\n<li><em>(Optional)<\/em> Upload a logo for quick visual recognition. <\/li>\n<li>Click <strong>Save<\/strong>. <\/li>\n<\/ol>\n<h3>Step 2: Configure OIDC Single Sign-On (SSO) <\/h3>\n<p>This section defines how your application communicates with Hexnode IdP, determining how tokens are issued, how users are redirected, and the level of security enforced. <\/p>\n<p><a href=\"https:\/\/cdn.hexnode.com\/help\/idp\/wp-content\/uploads\/2026\/05\/Hexnode-IDP-App-Settings-to-Configure-OIDC-Single-Sign-On.png\" target=\"_blank\" rel=\"noopener noreferrer\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/cdn.hexnode.com\/help\/idp\/wp-content\/uploads\/2026\/05\/Hexnode-IDP-App-Settings-to-Configure-OIDC-Single-Sign-On.png\" title=\"Hexnode IDP App Settings to Configure OIDC Single Sign-On\" alt=\"Screenshot of the Hexnode IDP portal showing the page to Configure OIDC Single Sign-On for an application. It displays various configuration fields including Application Type, Client Type, Require PKCE, Endpoints and Permissions (Login Redirect URIs, Logout URIs, and Allowed Scopes), and Grant Types (Authorization Code and Refresh Token).\" width=\"750\" height=\"500\"><\/a><\/p>\n<h4>Core Configuration <\/h4>\n<ol>\n<li>Select the <strong>Application Type<\/strong> that matches your architecture:\n<ol style=\"list-style-type: lower-alpha\">\n<li><strong>Web Application<\/strong>: For server-side apps where backend code handles authentication logic. <\/li>\n<li><strong>Native Application<\/strong>: For installed mobile or desktop applications. <\/li>\n<li><strong>Single Page Application (SPA)<\/strong>: For browser-based front-end applications. <\/li>\n<\/ol>\n<\/li>\n<li>Define the <strong>Client Type<\/strong>:\n<ol style=\"list-style-type: lower-alpha\">\n<li><strong>Confidential<\/strong>: For applications that can securely store a Client Secret (typically server-side web apps). <\/li>\n<li><strong>Public<\/strong>: For applications that cannot securely store secrets (such as mobile apps or SPAs). <\/li>\n<\/ol>\n<\/li>\n<li>Configure <strong>Require PKCE<\/strong>:\n<ol style=\"list-style-type: lower-alpha\">\n<li>Proof Key for Code Exchange (PKCE) prevents the interception and reuse of authorization codes.  <\/li>\n    \t\t<div class=\"hts-messages hts-messages--info  hts-messages--withtitle hts-messages--withicon \"   >\r\n    \t\t\t<span class=\"hts-messages__title\">Note:<\/span>    \t\t\t    \t\t\t\t<p>\r\n    \t\t\t\t\t<\/p>\n<p>If your <strong>Client Type<\/strong> is set to <strong>Public<\/strong>, <strong>PKCE<\/strong> is mandatory. The checkbox will be selected by default and greyed out.<br \/>\n    \t\t\t\t<\/p>\r\n    \t\t\t    \t\t\t\r\n    \t\t<\/div><!-- \/.ht-shortcodes-messages -->\r\n    \t\t\n<\/ol>\n<\/li>\n<\/ol>\n<h4>Endpoints and Permissions <\/h4>\n<ol>\n<li>Define your <strong>Login Redirect URIs<\/strong>:\n<ol style=\"list-style-type: lower-alpha\">\n<li>Click <strong>+ Add Redirect URI<\/strong> to specify the authorized endpoints where Hexnode IDP should send users after a successful authentication. If the redirect URI in an authentication request does not match a registered value here, the login will fail. <\/li>\n<\/ol>\n<\/li>\n<li>\nDefine your <strong>Logout URIs<\/strong>: <\/p>\n<ol style=\"list-style-type: lower-alpha\">\n<li>Click <strong>+ Add Logout URI<\/strong> to define the destination where users are redirected after logging out, ensuring a controlled session termination. <\/li>\n<\/ol>\n<\/li>\n<li>Select your <strong>Allowed Scopes<\/strong>:\n<ol style=\"list-style-type: lower-alpha\">\n<li>Scopes define what identity information the application can request. Options include <strong>Open ID<\/strong> (Required), <strong>Profile<\/strong>, <strong>Email<\/strong>, <strong>Offline Access<\/strong> (allows issuance of refresh tokens), and <strong>SCIM<\/strong>. <\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<h4>Grant Types <\/h4>\n<ol>\n<li>Select the method your application uses to obtain access tokens from Hexnode IdP:\n<ul>\n<li><strong>Authorization Code<\/strong>: The most secure and recommended flow. The user authenticates, an authorization code is sent to your application, and your application securely exchanges that code for tokens. <\/li>\n<li><strong>Refresh Token<\/strong>: Allows your application to request new access tokens without prompting the user to log in again, maintaining long-running sessions and improving user experience. <\/li>\n<\/ul>\n<\/li>\n<li>Click <strong>Next<\/strong> to proceed. <\/li>\n<\/ol>\n<h2>Step 3: Automate user lifecycle with SCIM 2.0 provisioning <\/h3>\n<p>If you wish to automatically sync user accounts between Hexnode IdP and the Service Provider, configure the SCIM connection parameters. <\/p>\n<p><a href=\"https:\/\/cdn.hexnode.com\/help\/idp\/wp-content\/uploads\/2026\/05\/SCIM-Provisioning-Settings-to-Configure-OIDC-Single-Sign-On-for-App-in-Hexnode-IDP.png\" target=\"_blank\" rel=\"noopener noreferrer\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/cdn.hexnode.com\/help\/idp\/wp-content\/uploads\/2026\/05\/SCIM-Provisioning-Settings-to-Configure-OIDC-Single-Sign-On-for-App-in-Hexnode-IDP.png\" title=\"SCIM Provisioning Settings to Configure OIDC Single Sign-On for App in Hexnode IDP\" alt=\"Screenshot of the Hexnode IDP portal showing the SCIM provisioning options for an application during the setup to Configure OIDC Single Sign-On. The page displays settings for the SCIM 2.0 Endpoint URL, secure Authorization Token, Provisioning Actions (Create Users, Update Users, Deactivate Users, Sync Groups), Synchronization Schedule, User Attribute Mapping, and Group Attribute Mapping.\" width=\"750\" height=\"500\"><\/a><\/p>\n<ol>\n<li>Provide the <strong>SCIM 2.0 Endpoint URL<\/strong> and the secure <strong>Authorization Token<\/strong>. <\/li>\n<li>Select the required <strong>Provisioning Actions<\/strong> (<strong>Create Users, Update Users, Deactivate Users, Sync Groups<\/strong>). <\/li>\n<li>Configure the Synchronization Schedule by setting a specific Schedule Sync time and Frequency (Daily, Weekly, or Monthly). <\/li>\n<li>Configure the <strong>User Attribute Mapping<\/strong> and <strong>Group Attribute Mapping<\/strong> to align Hexnode IdP fields with the application&#8217;s required schema. <\/li>\n<li>Click <strong>Next<\/strong>. <\/li>\n<\/ol>\n    \t\t<div class=\"hts-messages hts-messages--info  hts-messages--withtitle hts-messages--withicon \"   >\r\n    \t\t\t<span class=\"hts-messages__title\">Note:<\/span>    \t\t\t    \t\t\t\t<p>\r\n    \t\t\t\t\t<\/p>\n<p>For comprehensive instructions on configuring automated provisioning, refer to the article: <a href=\"https:\/\/www.hexnode.com\/help\/idp\/configure-scim-provisioning-hexnode-idp\/\" target=\"_blank\" rel=\"noopener noreferrer\">Configure SCIM Provisioning in Hexnode IdP<\/a>. <\/p>\n<p>    \t\t\t\t<\/p>\r\n    \t\t\t    \t\t\t\r\n    \t\t<\/div><!-- \/.ht-shortcodes-messages -->\r\n    \t\t\n<h3>Step 4: Manage user and group assignments <\/h3>\n<p>In the <strong>Assignments<\/strong> section, define which identities are authorized to authenticate into the application. You can browse your directory and explicitly <strong>Include<\/strong> or <strong>Exclude<\/strong> specific users or groups to control access based on your organization\u2019s requirements. After defining the initial access rules, click <strong>Next<\/strong>. <\/p>\n    \t\t<div class=\"hts-messages hts-messages--info  hts-messages--withtitle hts-messages--withicon \"   >\r\n    \t\t\t<span class=\"hts-messages__title\">Note:<\/span>    \t\t\t    \t\t\t\t<p>\r\n    \t\t\t\t\t<\/p>\n<p>For comprehensive instructions on configuring and modifying access rules, refer to the article: <a href=\"https:\/\/www.hexnode.com\/help\/idp\/assign-users-to-applications\/\" target=\"_blank\" rel=\"noopener noreferrer\">Assign Users\/Groups to Applications for Enterprise Single Sign-On<\/a>.<br \/>\n    \t\t\t\t<\/p>\r\n    \t\t\t    \t\t\t\r\n    \t\t<\/div><!-- \/.ht-shortcodes-messages -->\r\n    \t\t\n<h3>Step 5: Review the application <\/h3>\n<ol>\n<li>On the <strong>Review<\/strong> page, carefully verify the complete summary of your configuration, including:\n<ol style=\"list-style-type: lower-alpha\">\n<li>OIDC Single Sign-On settings <\/li>\n<li>SCIM provisioning configuration <\/li>\n<li>User and group assignments <\/li>\n<\/ol>\n<\/li>\n<li>If you need to make changes, click <strong>Edit<\/strong> next to the corresponding section. <\/li>\n<li>Once verified, click <strong>Create<\/strong> to complete the setup. <\/li>\n<\/ol>\n<p>After creation, the application is listed under <strong>Applications &gt; My Apps<\/strong>, where you can manage it at any time. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>This article provides a comprehensive overview of the OpenID Connect (OIDC) protocol and offers a step-by-step guide to configuring an OIDC enterprise application within Hexnode IdP. Understanding OIDC Authentication OpenID Connect (OIDC) is a modern, lightweight authentication protocol built as an identity layer on top of the OAuth 2.0 authorization framework. While OAuth 2.0 was [&hellip;]<\/p>\n","protected":false},"author":26,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[14,12],"tags":[],"class_list":["post-325","post","type-post","status-publish","format-standard","hentry","category-oidc","category-authentication-protocols"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Configure OIDC Single Sign-On for Apps<\/title>\n<meta name=\"description\" content=\"Learn how to configure OIDC Single Sign-On for your enterprise apps. Set up secure token grants, client types, redirect URIs, and more.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Configure OIDC Single Sign-On for Apps\" \/>\n<meta property=\"og:description\" content=\"Learn how to configure OIDC Single Sign-On for your enterprise apps. Set up secure token grants, client types, redirect URIs, and more.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/\" \/>\n<meta property=\"og:site_name\" content=\"Hexnode IDP\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-19T08:34:34+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-28T06:31:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.hexnode.com\/help\/idp\/wp-content\/uploads\/sites\/4\/2026\/05\/Hexnode-IDP-App-Settings-to-Configure-OIDC-Single-Sign-On.png\" \/>\n<meta name=\"author\" content=\"Shandwani Wilson\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Shandwani Wilson\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t    \"@context\": \"https:\/\/schema.org\",\n\t    \"@graph\": [\n\t        {\n\t            \"@type\": \"WebPage\",\n\t            \"@id\": \"https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/\",\n\t            \"url\": \"https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/\",\n\t            \"name\": \"Configure OIDC Single Sign-On for Apps\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\/\/www.hexnode.com\/help\/idp\/#website\"\n\t            },\n\t            \"primaryImageOfPage\": {\n\t                \"@id\": \"https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/#primaryimage\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\/\/www.hexnode.com\/help\/idp\/wp-content\/uploads\/sites\/4\/2026\/05\/Hexnode-IDP-App-Settings-to-Configure-OIDC-Single-Sign-On.png\",\n\t            \"datePublished\": \"2026-05-19T08:34:34+00:00\",\n\t            \"dateModified\": \"2026-05-28T06:31:33+00:00\",\n\t            \"description\": \"Learn how to configure OIDC Single Sign-On for your enterprise apps. Set up secure token grants, client types, redirect URIs, and more.\",\n\t            \"breadcrumb\": {\n\t                \"@id\": \"https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/#breadcrumb\"\n\t            },\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"ReadAction\",\n\t                    \"target\": [\n\t                        \"https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"ImageObject\",\n\t            \"inLanguage\": \"en-US\",\n\t            \"@id\": \"https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/#primaryimage\",\n\t            \"url\": \"https:\/\/cdn.hexnode.com\/help\/idp\/wp-content\/uploads\/2026\/05\/Hexnode-IDP-App-Settings-to-Configure-OIDC-Single-Sign-On-scaled.png\",\n\t            \"contentUrl\": \"https:\/\/cdn.hexnode.com\/help\/idp\/wp-content\/uploads\/2026\/05\/Hexnode-IDP-App-Settings-to-Configure-OIDC-Single-Sign-On-scaled.png\",\n\t            \"width\": 2560,\n\t            \"height\": 1299,\n\t            \"caption\": \"Screenshot of the Hexnode IDP portal showing the page to Configure OIDC Single Sign-On for an application. It displays various configuration fields including Application Type, Client Type, Require PKCE, Endpoints and Permissions (Login Redirect URIs, Logout URIs, and Allowed Scopes), and Grant Types (Authorization Code and Refresh Token).\"\n\t        },\n\t        {\n\t            \"@type\": \"WebSite\",\n\t            \"@id\": \"https:\/\/www.hexnode.com\/help\/idp\/#website\",\n\t            \"url\": \"https:\/\/www.hexnode.com\/help\/idp\/\",\n\t            \"name\": \"Hexnode IDP\",\n\t            \"description\": \"Hexnode IDP Help\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"SearchAction\",\n\t                    \"target\": {\n\t                        \"@type\": \"EntryPoint\",\n\t                        \"urlTemplate\": \"https:\/\/www.hexnode.com\/help\/idp\/?s={search_term_string}\"\n\t                    },\n\t                    \"query-input\": {\n\t                        \"@type\": \"PropertyValueSpecification\",\n\t                        \"valueRequired\": true,\n\t                        \"valueName\": \"search_term_string\"\n\t                    }\n\t                }\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        }\n\t    ]\n\t}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Configure OIDC Single Sign-On for Apps","description":"Learn how to configure OIDC Single Sign-On for your enterprise apps. Set up secure token grants, client types, redirect URIs, and more.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/","og_locale":"en_US","og_type":"article","og_title":"Configure OIDC Single Sign-On for Apps","og_description":"Learn how to configure OIDC Single Sign-On for your enterprise apps. Set up secure token grants, client types, redirect URIs, and more.","og_url":"https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/","og_site_name":"Hexnode IDP","article_published_time":"2026-05-19T08:34:34+00:00","article_modified_time":"2026-05-28T06:31:33+00:00","og_image":[{"url":"https:\/\/www.hexnode.com\/help\/idp\/wp-content\/uploads\/sites\/4\/2026\/05\/Hexnode-IDP-App-Settings-to-Configure-OIDC-Single-Sign-On.png","type":"","width":"","height":""}],"author":"Shandwani Wilson","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Shandwani Wilson","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/","url":"https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/","name":"Configure OIDC Single Sign-On for Apps","isPartOf":{"@id":"https:\/\/www.hexnode.com\/help\/idp\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/#primaryimage"},"image":{"@id":"https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/#primaryimage"},"thumbnailUrl":"https:\/\/www.hexnode.com\/help\/idp\/wp-content\/uploads\/sites\/4\/2026\/05\/Hexnode-IDP-App-Settings-to-Configure-OIDC-Single-Sign-On.png","datePublished":"2026-05-19T08:34:34+00:00","dateModified":"2026-05-28T06:31:33+00:00","description":"Learn how to configure OIDC Single Sign-On for your enterprise apps. Set up secure token grants, client types, redirect URIs, and more.","breadcrumb":{"@id":"https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.hexnode.com\/help\/idp\/configure-oidc-single-sign-on-apps\/#primaryimage","url":"https:\/\/cdn.hexnode.com\/help\/idp\/wp-content\/uploads\/2026\/05\/Hexnode-IDP-App-Settings-to-Configure-OIDC-Single-Sign-On-scaled.png","contentUrl":"https:\/\/cdn.hexnode.com\/help\/idp\/wp-content\/uploads\/2026\/05\/Hexnode-IDP-App-Settings-to-Configure-OIDC-Single-Sign-On-scaled.png","width":2560,"height":1299,"caption":"Screenshot of the Hexnode IDP portal showing the page to Configure OIDC Single Sign-On for an application. It displays various configuration fields including Application Type, Client Type, Require PKCE, Endpoints and Permissions (Login Redirect URIs, Logout URIs, and Allowed Scopes), and Grant Types (Authorization Code and Refresh Token)."},{"@type":"WebSite","@id":"https:\/\/www.hexnode.com\/help\/idp\/#website","url":"https:\/\/www.hexnode.com\/help\/idp\/","name":"Hexnode IDP","description":"Hexnode IDP Help","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.hexnode.com\/help\/idp\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.hexnode.com\/help\/idp\/wp-json\/wp\/v2\/posts\/325","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hexnode.com\/help\/idp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hexnode.com\/help\/idp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hexnode.com\/help\/idp\/wp-json\/wp\/v2\/users\/26"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hexnode.com\/help\/idp\/wp-json\/wp\/v2\/comments?post=325"}],"version-history":[{"count":10,"href":"https:\/\/www.hexnode.com\/help\/idp\/wp-json\/wp\/v2\/posts\/325\/revisions"}],"predecessor-version":[{"id":395,"href":"https:\/\/www.hexnode.com\/help\/idp\/wp-json\/wp\/v2\/posts\/325\/revisions\/395"}],"wp:attachment":[{"href":"https:\/\/www.hexnode.com\/help\/idp\/wp-json\/wp\/v2\/media?parent=325"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hexnode.com\/help\/idp\/wp-json\/wp\/v2\/categories?post=325"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hexnode.com\/help\/idp\/wp-json\/wp\/v2\/tags?post=325"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}