Solution for SSO authentication with OIDC protocol

Need help Plugins
1

Hi all,

Could you guide me in designing a solution to implement SSO for the buble.io application with my custom identity solution using the OIDC protocol? Below are the details:

The application is already built with [bubble.io]) and running successfully. The users are authenticating using a built-in user management module. As a product’ we have a custom build IAM solution that supports OpenID Connect protocol functionality to authenticate and authorize the users.

The requirement is to enable SSO for registered users with the IAM solution to enable SSO. The JWT token has the necessary roles and permission details to grant the page access.

The remaining users will access the application using the existing [bubble.io] user management model to authenticate.

A typical flow would be :

  1. The user tries to log in to the application

  2. If the user profile sets to SSO login in user data, then

  3. The application redirects user to the SSO URL

  4. On the SSO login page, the user enters his credentials

  5. The identity provider generates an authorization code and sends it back to the application

  6. The application sends the authorization code to the identity provider and obtains the ID JWT token

  7. The application verifies the ID JWT token obtained from the identity provider and logs in user to the application

I have researched the plugins in the marketplace, but all the solutions are provided for social logins. In my case, it is our own IAM solution.

I came to know from the bubble support team that the requirement could be achieved using the API Connector plugin and asked me to post the scenario in the forum to get the best answers.

2

Could someone please respond.

3

If you have a JWT … then you can “just” use the JWT auth in the API connector?

Bubble supports JWTs … Google uses them for certain auths (outside of social login).

1 Like
4

Thank you a lot.

So with the help of API Connector, we can achieve SSO authentication with OIDC protocol similar to the flow mentioned above. please confirm.

Could you share a sample reference if any to achieve the scenario.

5

@kiran_kumar_somisett did you ever find a solution? I am just starting to look for guidance on integrating with a 3rd party who requires OIDC myself.