Appshare supports Single Sign On through OpenID Connect. Many external identity providers support this. To use this feature the external identity provider must setup an OAuth application which Appshare can use to authenticate with. How to setup this OAuth application is out of scope of this document.

• Go to the administration
• open the nodes section
• open the identity providers
• Edit the providers
• Add a provider.
  • fill in a name
  • Select ‘OpenID Code Flow’ template
  • Fill in the issuer url from the OAuth application in the authority field
  • Fill in the client-id from the OAuth application
  • Optionally, fill in the url to redirect back to after authentication
• Save the provider

• Open the local nodes or cloud node section
• Choose in the menu of a node for ‘profiles’
• Add a profile
  • Give a description
  • Enter server address
  • Select the identity providers to be active
• Save the profile

With the above setup the login screen of the private node will show a login profile which will authenticate with OpenID and connect with the AIS server through a JWT token.