IDP Configuration
Executive Summary
IDP Configuration is an administrative screen for the identity provider (IDP) used for shared sign-in. Administrators review the current connection (provider type, client ID, directory ID, domains and metadata address) and, when permitted, update those settings so that users can sign in through Cognito, Microsoft Entra (MSEntra), Keycloak, Okta or SafeNet. Values are stored encrypted, and the client secret is never listed in the grid.
Key Features
- Review the identity-provider records for the tenant
- Edit the identity provider type and its connection values when permitted
- Microsoft Entra sign-in domain is built automatically from the Directory ID
Typical Workflow
- Open the page and confirm the IDP Type, Client ID, Directory ID and domains in the grid.
- If you have edit permission, click Edit on the row (or right-click the row and choose Edit).
- Choose the IDP Type and enter the values supplied by the identity provider.
- Click Save.
Available Permissions
The following permissions are available to be assigned to AlayaCare Roles:
| Attribute | What It Controls |
|---|---|
| View | Open the page and see the identity-provider records |
| Edit | Show the Edit button and right-click Edit menu, and save changes in Edit SharedIDP Settings |
Main Grid
The grid lists the identity-provider records (14 rows per page). The first three columns stay in view when scrolling sideways. Stored values are decrypted for display.
| Column | Description |
|---|---|
| ID | Record number. |
| URL | Configuration type (for example, sharedidp). |
| IDP Type | Identity provider: Cognito, MSEntra, Keycloak, Okta or SafeNet. |
| Client ID | Application or client ID from the identity provider. |
| Directory ID | Directory (tenant) ID, used for Microsoft Entra. |
| Domain | Sign-in domain or authority address. |
| Logout Domain | Sign-out domain, when set. |
| MetaData | Optional metadata address. |
| Manage Records | Contains the Edit button (only when you have edit permission). |
Actions
| Button | Description |
|---|---|
| Edit (row button, or right-click a row) | Opens the Edit SharedIDP Settings dialog. Available only with edit permission. |
Dialog Components
Edit SharedIDP Settings
Opens from Edit and shows the row's current values, including the client secret. The fields shown depend on the selected IDP Type. Save stores the settings; Cancel (or the close icon) closes without saving. A warning is shown when a required value is missing: "Directory ID is required" (MSEntra only), "Client ID is required", "Client Secret is required" or "IDP Domain is required".
| Field | When shown | Purpose |
|---|---|---|
| IDP Type | Always | Cognito, MSEntra, Keycloak, Okta or SafeNet. |
| Application ID | MSEntra | Application (client) ID from Microsoft Entra. Required. |
| Directory ID | MSEntra | Directory (tenant) ID. Required. The sign-in domain is set automatically from this value when you save. |
| Secret Value | MSEntra | Client secret from Microsoft Entra. Required. |
| Client ID | Other types | Client ID from the identity provider. Required. |
| Client Secret | Other types | Client secret from the identity provider. Required. |
| Domain | Other types | Sign-in domain or authority address. Required. |
| IDP Logout Domain | Other types | Sign-out domain. Optional. |
| IDP MetaData URL (opt) | All types | Optional metadata address. |
Saving updates the existing record and keeps it as the shared identity provider. For MSEntra, the domain and logout domain fields are not shown; the domain is replaced with the one built from the Directory ID.