Note |
---|
As of Noah ES does support using OpenID Connect. However, once the single sign-on entry has been made it cannot later be edited. This is a know issue and will be addressed in the near future. In the meantime, If values need to edited it will then be required to create a new SSO entry, then it will be necessary to edit each users account to make use of the new SSO entry. |
Noah ES can integrate with third-party authentication systems – for example, Microsoft Azure Active Directory, OpenID Connect, however this document is specifically for OpenID Connect integration.
OpenID Connect is an authentication and authorization protocol that enables SSO for web and mobile applications.
Setting Up Noah ES within the Identity Provider (Okta)
In Okta, create a new “App Integration” by selecting the OIDC sign-in method and Application Type = Web Application.
specify a "Sign-in"- and "Sign-out"- redirect URI at the third-party OpenID Connect providers configuration page.
The URI depend upon the NoahES data center where the tenant (account) is hosted. See Points 1 and 2 in the diagram to the right
For Noah ES account in the US data center use the following URIs: | For Noah ES account in the EU data center use the following URIs: |
---|---|
Sign-in redirect URI: https://idp.us.noah-es.com/signin-idsrv | Sign-in redirect URI: https://idp.eu.noah-es.com/signin-idsrv |
Sign-out redirect URI: https://idp.us.noah-es.com/signout-idsrv | Sign-out redirect URI: https://idp.eu.noah-es.com/signout-idsrv |
Diagram 1
Drawio | ||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Diagram 2
Drawio | ||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Diagrams 3-4
Expand | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
https://idp.eu.noah-es.com/signout-idsrv
When configuring NoahES for a third-party OpenID Connect provider (e.g. OKTA) - you may need to specify a "Sign-in"- and "Sign-out"- redirect URI at the third-party OpenID Connect providers configuration page.
The URI depend upon the NoahES data center where the tenant (account) is hosted.
For tenants in the US data center use the following URIs:
Sign-in redirect URI:
https://idp.us.noah-es.com/signin-idsrv
Sign-out redirect URI:
https://idp.us.noah-es.com/signout-idsrv
For tenants in the EU data center use the following URIs:
Sign-in redirect URI:
https://idp.eu.noah-es.com/signin-idsrv