OpenID Connect#

Portal Configuration#

File: /etc/vpn-mini-portal/config.json:

{
    "RemoteUser": {
        "attributeMapping": {
            "OIDC_CLAIM_groups": "groups"
        },
        "attributeValueDelimiter": ",",
        "logoutUrl": "https://vpn.example.org/x_auth/redirect_uri",
        "returnToParameter": "logout",
        "userAttributes": [
            "OIDC_CLAIM_groups"
        ]
    },
    "authMethod": "RemoteUser"
}

Apache#

OIDCProviderMetadataURL https://op.example.org/.well-known/openid-configuration
OIDCClientID 0Xmu5MBKDhys68C_h3QHnROJxXMJMHR2M7T2oX_XA1E
OIDCClientSecret KlVDX9cMMcmWxeidEdjtJotuVHa21TVYgHvXAx6AeoM
OIDCRedirectURI https://vpn.example.org/x_auth/redirect_uri
OIDCCryptoPassphrase MrlV1qgckobQYftd6BClwYuuxoRvdRftQE2l3qnMWgo=
OIDCScope "openid profile groups"
OIDCRemoteUserClaim preferred_username@
OIDCProviderTokenEndpointAuth client_secret_post

<Location /x_auth>
    AuthType openid-connect
    Require valid-user
</Location>