Required security profile permissions: External Business Unit View
The OpenID Connect tab allows you to link your account with your identity provider to enable single sign-on (SSO). It also enables the platform to automatically create a new user whenever a user associated with your identity provider logs in with OpenID Connect for the first time. If you want OpenID Connect enabled in your environment, contact your NICE inContact account manager.
General
- Business Unit Hostname
- The hostname of the login page. This is only editable by NICE inContact.
- Disable inContact Authentication
- Specifies whether the default method for logging in—entering a username and password—is allowed. When selected, the option to type a username and password to log in is disabled. You can only enable this option after you have configured OpenID Connect.
- Default Security Profile
- Specifies the security profile assigned to any user account that is automatically created when the user first logs in with SSO.
- Default Team
- Specifies the team assigned to any user account that is automatically created when the user first logs in with SSO.
Identity Provider
- Discover Settings
- Prompts you for a discovery URL, which your identity provider may have given you. It automatically populates the fields on this page, which are required for you to connect to your identity provider.
- Issuer
- The issuer assigned to your account by your identity provider.
- Client Identifier
- The login ID assigned to your account by your identity provider.
- Client Password
- The login password assigned to your account by your identity provider.
- Client Confirm Password
- The login password assigned to your account by your identity provider.
- JsonWebKeySet Endpoint
- The JSON web key set endpoint URL assigned to your account by your identity provider.
- Authorization Endpoint
- The authorization endpoint URL assigned to your account by your identity provider.
- Token Endpoint
- The token endpoint URL assigned to your account by your identity provider.
- UserInfo Endpoint
- The user info endpoint URL assigned to your account by your identity provider.
- Revocation Endpoint
- The revocation endpoint URL assigned to your account by your identity provider.
- Client Authentication Method
- The authentication method your identity provider supports.
- Enable FICAM Profile
- When selected, turns on U.S. government-specific settings.
- Validation Status
- Indicates whether or not the configuration data in the preceding fields has been validated.
