Skip to main content

Add OpenID Connect identity providers to an Aiven Runtime application

You can give users access to an Aiven Runtime application through identity providers (IdPs) that support OpenID Connect (OIDC).

Required roles or permissions:role:project:admin, role:project:manager, or project:services:write
Note

Aiven handles authentication and blocks unauthenticated traffic at the platform level. If your backend needs to identify the logged-in user, read the identity passed in the X-Forwarded-User HTTP header.

The setup order depends on when your provider requires the redirect URI. Provider-specific instructions are available for the following:

Step 1: Register an app in your identity provider​

  1. Open the console for your identity provider in another tab.
  2. In your identity provider, register a new app.
  3. Copy the OIDC issuer URL, client ID, and client secret.

Step 2: Add your IdP to a Runtime application​

In the Aiven Console:

  1. In the Aiven Console, go to your Aiven Runtime application and click Authentication.

  2. Click Add authentication method.

  3. Select OpenID Connect (OIDC).

  4. Enter a name for the identity provider.

  5. Enter the Issuer URL, Client ID, and Client secret.

  6. Copy the Redirect URL.

  7. Click Add.

Step 3: Add the redirect URL to your application​

In your identity provider, add the Redirect URL from the Aiven Console.