chauthsinglesignon
Use the chauthsinglesignon command to change the system-wide single sign-on authentication configuration.
Syntax
Parameters
- -enable
- (Optional) Specifies the enablement of the single sign-on service.
- -disable
- (Optional) Specifies the disablement of the single sign-on service. This parameter is mutually exclusive with -enable, -oidcconfigurationendpoint, -proxy, -clientid, -clientsecret, -userclaim, -groupclaim.
- -oidcconfigurationendpoint oidc_configuration_endpoint
- (Optional) Specifies the full path to the openid-configuration endpoint of the single sign-on provider. It must consist of a string up to 255 printable ASCII characters.
- -proxy use_proxy
- (Optional) Specifies whether to use the configured proxy to connect to the single sign-on provider. Value can be yes or no.
- -clientid client_id
- (Optional) Specifies the OpenID Connect client ID for the system, required to authenticate with the single sign-on provider. It must consist of a string up to 64 printable ASCII characters.
- -clientsecret client_secret
- (Optional) Specifies the OpenID Connect client secret for the system, required to authenticate with the single sign-on provider. It must consist of a string up to 64 printable ASCII characters.
- -userclaim user_claim
- (Optional) Specifies the claim in the OpenID Connect ID token used to identify the user's name. It must consist of a string up to 64 printable ASCII characters.
- -groupclaim group_claim
- (Optional) Specifies the claim in the OpenID Connect ID token used to identify the user's group. It must consist of a string up to 64 printable ASCII characters.
An invocation example
chauthsinglesignon -oidcconfigurationendpoint https://wildduks.verify.ibm.com/oidc/endpoint/default/.well-known/openid-configuration
-clientid a3514ba2-aa5b-492b-983d-d34e2ba39f61 -clientsecret mtU81MuMQO -groupclaim marvel -userclaim spiderman -enable
The resulting output:
No feedback.