Users Guide

Related information
Managing OpenManage Enterprise appliance settings on page 131
Manage OpenManage Enterprise users on page 132
OpenManage Enterprise login using OpenID Connect
providers
OpenManage Enterprise 3.5 provides a new way to log in using OpenID Connect (OIDC) providers. OpenID Connect providers
are the identity and user management software that allow users to securely access applications.
Currently, OpenManage Enterprise provides support for PingFederate and Keycloak.
NOTE:
● To perform any tasks on OpenManage Enterprise, you must have the necessary user privileges. See Role-based
OpenManage Enterprise user privileges on page 14.
● Only a maximum of four OpenID Connect provider IDs can be added in the appliance.
Prerequisites:
Before enabling an OpenID Connect provider login you must:
1. Add an OIDC provider in the OpenManage Enterprise: In OpenManage Enterprise Application Settings, add an OpenID
Connect provider. When you add the OpenID Connect provider, a Client ID is generated for the OpenID Connect provider.
For more information, see: Add an OpenID Connect provider to OpenManage Enterprise on page 141.
2. Configure the OpenID Connect provider using the Client ID: In the OpenID Connect provider, locate the Client ID and
define a login role (Administrator, Device Manager or Viewer) by adding and mapping the scope called dxcua (Dell extended
claim for user authentication). For more information, see:
● Configure an OpenID Connect provider policy in PingFederate for role-based access to OpenManage Enterprise on page
141
● Configure an OpenID Connect provider policy in Keycloak for role-based access to OpenManage Enterprise on page 142
When you add an OpenID Connect provider in OpenManage Enterprise, it is listed on the Application Settings > Users >
OpenID Connect Providers page. The following OIDC provider details are displayed:
● Name - The OpenID Connect provider's name when it was added in the appliance
● Enabled - A 'check' on this field indicates that the OpenID Connect provider is enabled in the appliance
● Discovery URI - The URI (Uniform Resource Identifier) of the OpenID Connect provider
● Registration Status - Can be one of the following:
○ Successful - Indicates a successful registration with the OpenID Connect provider
○ Failed - Indicates an unsuccessful registration with the OpenID Connect provider. The 'Failed' OpenID Connect provider
registration will not be allowed even when they are enabled.
○ In Progress - This status is displayed when the appliance tries to register with OpenID Connect provider.
On the right pane, Client ID, Registration Status, Discovery URI are displayed for the selected OpenID Connect provider. You
can click See details to view the certificate details of the OpenID Connect provider.
On the Application Settings > Users > OpenID Connect Providers page you can do the following:
● Add an OpenID Connect provider to OpenManage Enterprise on page 141
● Edit an OpenID Connect provider details in OpenManage Enterprise on page 142
● Test the registration status of OpenManage Enterprise with the OpenID Connect provider on page 142
● Enable OpenID Connect providers on page 143
● Disable OpenID Connect providers on page 143
● Delete OpenID Connect providers on page 143
140
Managing OpenManage Enterprise appliance settings