Implement SSOJet OIDC Hosted Page
This skill guides you through implementing the OIDC Authorization Code flow with SSOJet's Hosted Login Page.
- Prerequisites
-
Client ID: From the SSOJet Dashboard.
-
Client Secret: From the SSOJet Dashboard (store securely!).
-
Redirect URI: Must be whitelisted in the SSOJet Dashboard (e.g., http://localhost:3000/callback ).
-
SSOJet Domain: Your organization's SSOJet domain (e.g., https://auth.ssojet.com ).
- Implementation Steps
Step 1: Configure OIDC Client
Initialize your OIDC client with the credentials above. Use a well-maintained OIDC library for your language.
Step 2: Redirect to Login
Construct the authorization URL and redirect the user.
-
Endpoint: /oauth2/authorize
-
Params:
-
response_type=code
-
client_id=YOUR_CLIENT_ID
-
redirect_uri=YOUR_REDIRECT_URI
-
scope=openid profile email
Step 3: Handle Callback
On the callback route (e.g., /callback ):
-
Extract the code parameter from the query string.
-
Exchange the code for tokens at /oauth2/token .
-
Verify the id_token signature using the JWKS endpoint (/.well-known/jwks.json ).
- Examples
Refer to the examples/ directory for complete implementations:
-
Node.js: examples/nodejs/app.js
-
Python: examples/python/app.py
-
Go: examples/go/main.go