Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

OpenManage Enterprise 4.1.x User's Guide

PDF

Login using OIDC providers

You can log in using OpenID Connect (OIDC) providers. OpenID Connect providers are the identity and user management software that allow users to securely access applications. OpenManage Enterprise supports PingFederate and Keycloak.

CAUTION:
  • User roles and scopes are reset to 'default' on client re-registration with an OIDC provider PingFederate (PingIdentity). This issue might lead to resetting of the privileges and scope of nonadmin roles (DM and Viewer) to that of the Administrator.
  • OIDC provider is triggered during an appliance upgrade, change in network configuration, or change in SSL certificate.
  • To avoid security concerns post any of the above-mentioned re-registration events, the administrator must reconfigure all the OpenManage Enterprise Client IDs on the PingFederate site. Also, it is highly recommended that Client IDs are created only for Administrator users with Pingfederate till this issue is resolved.
NOTE:
  • To perform any tasks on OpenManage Enterprise, you must have the necessary user privileges. See Role and scope-based access.
  • Only a maximum of four OpenID Connect provider IDs can be added in the appliance.

Prerequisites:

Before enabling an OpenID Connect provider login, you must:

  1. Add an OIDC provider in the OpenManage Enterprise: In OpenManage Enterprise Application Settings, add an OpenID Connect provider. When you add the OpenID Connect provider, a Client ID is generated for the OpenID Connect provider. For more information, see: Add an OIDC provider.
  2. Configure the OpenID Connect provider using the Client ID: In the OpenID Connect provider, locate the Client ID, and define a login role (Administrator, Device Manager, or Viewer) by adding and mapping the scope that is called dxcua (Dell extended claim for user authentication). For more information, see:

When you add an OpenID Connect provider, it is listed on the Application Settings > Users > OpenID Connect Providers screen. The following OIDC provider details are displayed:

  • Name lists the name of the OpenID Connect provider when it was added in the appliance.
  • Enabled indicates whether the OpenID Connect provider is enabled in the appliance.
  • Discovery URI lists the Uniform Resource Identifier (URI) of the OpenID Connect provider.
  • Registration Status can be one of the following:
    • Successful indicates a successful registration with the OpenID Connect provider.
    • Failed indicates an unsuccessful registration with the OpenID Connect provider. The 'Failed' OpenID Connect provider registration is allowed even when they are enabled.
    • In Progress is displayed when the appliance tries to register with the OpenID Connect provider.

On the right pane, Client ID, Registration Status, Discovery URI are displayed for the selected OpenID Connect provider. Click See details to view the certificate details of the OpenID Connect provider.

On the Application Settings > Users > OpenID Connect Providers screen, the following tasks are available:

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\