chauthsinglesignon

Use the chauthsinglesignon command to change the system-wide single sign-on authentication configuration.

Syntax

Read syntax diagramSkip visual syntax diagram chauthsinglesignon -enable-disable-oidcconfigurationendpointoidc_configuration_endpoint-proxyuse_proxy-clientidclient_id-clientsecretclient_secret-userclaimuser_claim-groupclaimgroup_claim

Parameters

-enable
(Optional) Specifies the enablement of the single sign-on service.
-disable
(Optional) Specifies the disablement of the single sign-on service. This parameter is mutually exclusive with -enable, -oidcconfigurationendpoint, -proxy, -clientid, -clientsecret, -userclaim, -groupclaim.
-oidcconfigurationendpoint oidc_configuration_endpoint
(Optional) Specifies the full path to the openid-configuration endpoint of the single sign-on provider. It must consist of a string up to 255 printable ASCII characters.
-proxy use_proxy
(Optional) Specifies whether to use the configured proxy to connect to the single sign-on provider. Value can be yes or no.
-clientid client_id
(Optional) Specifies the OpenID Connect client ID for the system, required to authenticate with the single sign-on provider. It must consist of a string up to 64 printable ASCII characters.
-clientsecret client_secret
(Optional) Specifies the OpenID Connect client secret for the system, required to authenticate with the single sign-on provider. It must consist of a string up to 64 printable ASCII characters.
-userclaim user_claim
(Optional) Specifies the claim in the OpenID Connect ID token used to identify the user's name. It must consist of a string up to 64 printable ASCII characters.
-groupclaim group_claim
(Optional) Specifies the claim in the OpenID Connect ID token used to identify the user's group. It must consist of a string up to 64 printable ASCII characters.

An invocation example

chauthsinglesignon -oidcconfigurationendpoint https://wildduks.verify.ibm.com/oidc/endpoint/default/.well-known/openid-configuration 
-clientid a3514ba2-aa5b-492b-983d-d34e2ba39f61 -clientsecret mtU81MuMQO -groupclaim marvel -userclaim spiderman -enable

The resulting output:

No feedback.