Cura Web OpenID application setup
Introduction
This manual shows how to make an OpenID connection to Cura Web. The configuration takes place in HelloID and requires you to send information to Cura.
Requirements:
HelloID environment
Cura Web environment
Users who wish to make use of the SSO are required to have their 'email address' in Cura
Create or Import a Certificate
If there is no certificate yet, a certificate must be imported or created. This can be done in the HelloID Administrator Portal under Settings > Certificates. For this tutorial, we will use a self-signed certificate. Learn more about certificates here.
Application Setup
Add the Cura Web Application
Create a new application in HelloID by navigating to Applications > Applications. Open the Application Catalogue and search for "Cura Web". Find the OpenID template, and click Add. Learn more about managing applications here.
General tab
On the General tab, replace the URL in the Default Login URL field with your Cura Web environment URL.
Example: https://enyoiecd.unit4online.com/CuraWebEcdAcc
Optionally, you may also add a description. Click Next.
Single Sign-on tab
On the Single Sign-On tab, perform the following steps:
Provide a value in the Secret field.
This can be any value that you want. Although we suggest a string of at least 52 characters.
In the Signing Certificate dropdown, select the certificate that you created or imported previously.
Change the Redirect Uri to the redirect Uri provided by Cura (in the format https://identity.curagezondheidszorg.nl/auth/realms/{customer}/broker/{oidc_identity_provider}/endpoint).
Example: https://identity.curagezondheidszorg.nl/auth/realms/enyoi/broker/oidc/endpoint
Click Next.
Self service tab
On the Self Service tab, choose whether to automatically create a Self Service product, which makes the application requestable. This is optional. Click Next.
Finish tab
On the Finish tab, click Save to add the application to HelloID.
Additional Configuration
Discovery document
After adding the Cura Web application, click its Edit link on the applications overview. This will bring you to its properties page. Right-click View discovery document at the right top of the screen and Copy link address. Make note of it, as you will need to provide this information to Cura later on.
Client ID & Client Secret
We also need the Client ID
Go to the Configuration tab of the application. Make note of the Client ID.
And finally, we also need the Client secret. At the configuration tab, click the "eye" icon next to the Secret to view the secret. Make note of the Secret aswell.
Click Close and then click Save. The configuration of the HelloID application is finished.
Cura Web Configuration
Request SSO
In order to make the connection, Cura needs to add the connection on their side. This can be requested at Cura.
To configure the SSO on the Cura side, they will need the following information:
Client IDThe Client ID is a GUID automatically generated when creating an application in your HelloID environment. At Additional Configuration - Client ID & Client Secret is described where to find this.
For example: 478ecc46-0b96-4e74-baa4-b08995cd35fb
Client SecretThe Client Secret you specified at step 1. at the Single Sign-on Tab of the HelloID configuration (if forgotten, at the Additional Configuration - Client ID & Client Secret is described where to find this again).
For example: Hc2V5v4fJmPm4vNFgX2tGmNWdUGEy2PCtXXTLkBQQUvsgrC3TeUR
Discovery documentPlease provide the discovery document URL to Cura. This is the link address you copied at the Additional Configuration - Discovery document For example: https://enyoi.helloid.com/oauth2/v2/478ecc46-0b96-4e74-baa4-b08995cd35fb/.well-known/openid-configuration/