- Getting Started
-
Administration Guide
- Get Started with Administering Wyn Enterprise
- Configuration Settings
- Account Management
- Security Management
- System Management
- Document Management
-
How To and Troubleshooting
- Change Default Password
- Set Language Preference
- Slack Integration
- MS Teams Integration
- Create Custom Language Packages
- Configure Identity Server
- Configure Single Sign-on
- Convert Crystal Reports/MS Access Reports to Wyn Reports
- Encrypt or Decrypt Connection Strings
- Using ClickHouse as OLAP Database
- Hide Download Link in Scheduled Tasks
- Configure Redis Cluster using Username and Password
- User Guide
- Developer Guide
Google Cloud Service
Google Cloud Service provides Cloud Identity as your Identity Provider (IdP) that supports OpenID Connect (OIDC) for SSO based access to the Wyn Enterprise application users. You can configure SSO to the Wyn Enterprise application with the Google Cloud Service.
Before configuring SSO, make sure that you have installed the Wyn Enterprise application version 6.0 or above and have access to the Google Cloud Platform with a user account in Cloud Identity or Google Workspace. Follow the below instructions to configure SSO with Google Cloud Service,
Configuration Node Management
Add the SSO configuration node to the Wyn configuration file, Wyn.conf, and ensure the following,
AuthenticationProtocol option must be OAUTH.
Scheme is optional. In case, you don't specify the Scheme option in the configuration file, the value of this option will be set to Oauth, by default.
Disabled option is used to disable the SSO function.
AuthorizationEndpoint, TokenEndpoint, UserInformationEndpoint, ClientId, and ClientSecret options are mandatory and are available in your Google Cloud Service.
CallbackPath is optional and if not specified, the default value of this option is /signin-oauth. Ensure that the CallbackPath matches the Redirect URI you specified in the Google Cloud Service.
<Server> <Authentication> <SSO> <AuthenticationProtocol>OAUTH</AuthenticationProtocol> <Scheme>Google</Scheme> <AuthorizationEndpoint>https://accounts.google.com/o/oauth2/v2/auth</AuthorizationEndpoint> <TokenEndpoint>https://www.googleapis.com/oauth2/v4/token</TokenEndpoint> <UserInformationEndpoint>https://www.googleapis.com/oauth2/v2/userinfo</UserInformationEndpoint> <ClientId>{your_client_id}</ClientId> <ClientSecret>{your_client_secret}</ClientSecret> <Scopes> <sys:string>openid</sys:string> <sys:string>profile</sys:string> <sys:string>email</sys:string> </Scopes> <ClaimMappings> <sys:Item> <Key>sub</Key> <Value>id</Value> </sys:Item> <sys:Item> <Key>name</Key> <Value>name</Value> </sys:Item> <sys:Item> <Key>given_name</Key> <Value>given_name</Value> </sys:Item> <sys:Item> <Key>family_name</Key> <Value>family_name</Value> </sys:Item> <sys:Item> <Key>email</Key> <Value>email</Value> </sys:Item> <sys:Item> <Key>avatar</Key> <Value>picture</Value> </sys:Item> </ClaimMappings> </SSO> </Authentication> </Server>
See the Additional SSO Settings section of the Configure Single sign-on help doc for information on configuring the cookies and incognizant user login options.