/
OIDC based external authentication for Kyvos Web Portal

OIDC based external authentication for Kyvos Web Portal

Applies to: Kyvos Enterprise  Kyvos Cloud (SaaS on AWS) Kyvos AWS Marketplace

Kyvos Azure Marketplace   Kyvos GCP Marketplace Kyvos Single Node Installation (Kyvos SNI)

OpenID Connect (OIDC) is a federated SSO authentication protocol built over OAuth2.0 and is already supported for authentication in the Kyvos Web Client.

Note

Before you configure the OIDC (Auth2.0) as an external authentication provider for the Kyvos Web Client, you must add the following values when creating the application in Identity Provider (IdP) for Single Sign On:
Sign-in redirect URIs: <http://<IP>>:<PORT>/kyvos/oauthRedirect
Example: If clusters
KYVOS_PUBLIC_URL: http://122.22.13.126:8081/kyvos/
then Sign-in redirect URIs will be http://122.22.13.126:8081/kyvos/oauthRedirect

For more information about Identity Provider (IDP) for Single Sign On, refer to OKTA documentation.

Kyvos supports OIDC authentication (Browser-based login/SSO) for the following:

Configuration Type

Kyvos Web Portal

Excelerate Desktop

Excelerate Web

Tableau Desktop

Tableau Server

Kyvos Excel Add-in

Power BI Desktop

 

Power BI

Service (through Gateway)

Confidential OIDC

Public OIDC

To configure the OIDC (Auth2.0) as an external authentication provider for the Kyvos Web Portal, perform the following steps. 

  1. On the navigation pane, click Security > Web based SSO.
    The Web based SSO dialog is displayed. 

    image-20250717-150245.png

  2. Select the Enable External Authentication check box to define the external authentication mechanism for the Kyvos Web portal.

  3. Select the OIDC option from the Provider list.

  4. Enter details as:

Parameter/Field

Comments/Description

Parameter/Field

Comments/Description

Header Name

Enter the name of the HTTP header that contains the user name in the HTTP request.

Header Type

Select the type of value to be sent by the external authentication tool as an SSO token.

Error Redirection URL

Enter the URL to which the user will be redirected if there is an error in authenticating the Kyvos application with OIDC
Absolute URLs are supported. 
For example: http://host:port/appname

  1. For OIDC Settings for Confidential Client and Public client, enter details as:

  1. Click the Save button to save changes.

Copyright Kyvos, Inc. 2026. All rights reserved.