{"id":5950,"date":"2023-06-26T11:56:20","date_gmt":"2023-06-26T11:56:20","guid":{"rendered":"https:\/\/youngitconsulting.de\/staging\/2187\/?p=5950"},"modified":"2023-07-08T08:01:26","modified_gmt":"2023-07-08T08:01:26","slug":"sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp","status":"publish","type":"post","link":"https:\/\/youngitconsulting.de\/staging\/2187\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\/","title":{"rendered":"SSO Architecture using OpenID Connect (OIDC) protocol with Liferay DXP"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"5950\" class=\"elementor elementor-5950\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-10d40f9e elementor-section-boxed elementor-section-height-default elementor-section-height-default wpr-particle-no wpr-jarallax-no wpr-parallax-no wpr-sticky-section-no wpr-equal-height-no\" data-id=\"10d40f9e\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-111cc302\" data-id=\"111cc302\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6835d09 elementor-widget elementor-widget-text-editor\" data-id=\"6835d09\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"feed-shared-update-v2__description-wrapper mr2\" tabindex=\"-1\"><div class=\"feed-shared-inline-show-more-text feed-shared-update-v2__description feed-shared-inline-show-more-text--minimal-padding feed-shared-inline-show-more-text--expanded \" tabindex=\"-1\" data-artdeco-is-focused=\"true\"><div class=\"update-components-text relative feed-shared-update-v2__commentary \" dir=\"ltr\"><span class=\"break-words \"><span class=\"break-words \"><span dir=\"ltr\">In continuation with my last article on SSO i.e. (<a href=\"https:\/\/lnkd.in\/eFEYSpqg\" data-attribute-index=\"12\">https:\/\/lnkd.in\/eFEYSpqg<\/a>) , I created a 40 sec flow diagram video .<br \/>This Flow diagram illustrate SSO Flow using OpenID Connect (OIDC) protocol with Liferay DXP Portal.<\/span><\/span><\/span><p>Following are the steps .<\/p><p><br \/>Step 1) User request SignIn page using browser , SignIn Page Open up , User clicks on the SignIn Link.<\/p><p>Step 2) Liferay redirects to the SignIn page (called Authorization Endpoint)of the OIDC Provider screen (Provider could be Microsoft azure ,google or any other provider).<\/p><p>Step 3) User enters the credentials.<\/p><p>Step 4) OIDC Provider process the request and generate a Token and sends back to the user browser.<\/p><p>Step 5) Browser redirect the request to Liferay Redirect URI along with the Token.<\/p><p>Step 6) Liferay Validates the token using Providers JWKS URI which contains the public keys that can verify the token. Once token Validation is successful Liferay adds a session cookie on to the browser which to keeps the session with the browser alive .<\/p><p><a href=\"https:\/\/www.linkedin.com\/feed\/hashtag\/?keywords=datasecurity&amp;highlightedUpdateUrns=urn%3Ali%3Aactivity%3A7006611843532115968\" data-attribute-index=\"0\">#datasecurity<\/a>\u00a0<a href=\"https:\/\/www.linkedin.com\/feed\/hashtag\/?keywords=singlesignon&amp;highlightedUpdateUrns=urn%3Ali%3Aactivity%3A7006611843532115968\" data-attribute-index=\"1\">#singlesignon<\/a>\u00a0\u00a0<a href=\"https:\/\/www.linkedin.com\/feed\/hashtag\/?keywords=liferay&amp;highlightedUpdateUrns=urn%3Ali%3Aactivity%3A7006611843532115968\" data-attribute-index=\"2\">#liferay<\/a>\u00a0<a href=\"https:\/\/www.linkedin.com\/feed\/hashtag\/?keywords=liferaydxp&amp;highlightedUpdateUrns=urn%3Ali%3Aactivity%3A7006611843532115968\" data-attribute-index=\"3\">#liferaydxp<\/a>\u00a0<a href=\"https:\/\/www.linkedin.com\/feed\/hashtag\/?keywords=liferayexperiencecloud&amp;highlightedUpdateUrns=urn%3Ali%3Aactivity%3A7006611843532115968\" data-attribute-index=\"4\">#liferayExperienceCloud<\/a>\u00a0<a href=\"https:\/\/www.linkedin.com\/feed\/hashtag\/?keywords=architecture&amp;highlightedUpdateUrns=urn%3Ali%3Aactivity%3A7006611843532115968\" data-attribute-index=\"5\">#architecture<\/a>\u00a0<a href=\"https:\/\/www.linkedin.com\/feed\/hashtag\/?keywords=sso&amp;highlightedUpdateUrns=urn%3Ali%3Aactivity%3A7006611843532115968\" data-attribute-index=\"6\">#SSO<\/a>\u00a0<a href=\"https:\/\/www.linkedin.com\/feed\/hashtag\/?keywords=saml&amp;highlightedUpdateUrns=urn%3Ali%3Aactivity%3A7006611843532115968\" data-attribute-index=\"7\">#saml<\/a>\u00a0<a href=\"https:\/\/www.linkedin.com\/feed\/hashtag\/?keywords=openid&amp;highlightedUpdateUrns=urn%3Ali%3Aactivity%3A7006611843532115968\" data-attribute-index=\"8\">#openid<\/a>\u00a0<a href=\"https:\/\/www.linkedin.com\/feed\/hashtag\/?keywords=saml&amp;highlightedUpdateUrns=urn%3Ali%3Aactivity%3A7006611843532115968\" data-attribute-index=\"9\">#saml<\/a>\u00a0\u00a0<a href=\"https:\/\/www.linkedin.com\/feed\/hashtag\/?keywords=oidc&amp;highlightedUpdateUrns=urn%3Ali%3Aactivity%3A7006611843532115968\" data-attribute-index=\"10\">#oidc<\/a>\u00a0\u00a0<a href=\"https:\/\/www.linkedin.com\/feed\/hashtag\/?keywords=design&amp;highlightedUpdateUrns=urn%3Ali%3Aactivity%3A7006611843532115968\" data-attribute-index=\"11\">#design<\/a><\/p><p>\u00a0<\/p><\/div><\/div><\/div><div class=\"feed-shared-external-video feed-shared-update-v2__content \"><div class=\"feed-shared-external-video__container\"><div><div class=\"external-video-viewer\"><div class=\"external-video-viewer__thumbnail-container\"><div id=\"ember8993\" class=\"video-s-loader__thumbnail video-s-loader__thumbnail--wide ember-view\" aria-label=\"SSO Flow diagram using OpenID Connect (OIDC) protocol with Liferay DXP Portal\">\u00a0<\/div><\/div><\/div><\/div><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1470074 elementor-widget elementor-widget-video\" data-id=\"1470074\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;youtube_url&quot;:&quot;https:\\\/\\\/www.youtube.com\\\/watch?v=jLFQSiTCEMc&quot;,&quot;video_type&quot;:&quot;youtube&quot;,&quot;controls&quot;:&quot;yes&quot;}\" data-widget_type=\"video.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-wrapper elementor-open-inline\">\n\t\t\t<div class=\"elementor-video\"><\/div>\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>In continuation with my last article on SSO i.e. (https:\/\/lnkd.in\/eFEYSpqg) , I created a 40 sec flow diagram video . This Flow diagram illustrate SSO Flow using OpenID Connect (OIDC) protocol with Liferay DXP Portal. Following are the steps . Step 1) User request SignIn page using browser , SignIn Page Open up , User clicks on the SignIn Link. Step 2) Liferay redirects to the SignIn page (called Authorization Endpoint)of the OIDC Provider screen (Provider could be Microsoft azure ,google or any other provider). Step 3) User enters the credentials. Step 4) OIDC Provider process the request and generate a Token and sends back to the user browser. Step 5) Browser redirect the request to Liferay Redirect URI along with the Token. Step 6) Liferay Validates the token using Providers JWKS URI which contains the public keys that can verify the token. Once token Validation is successful Liferay adds a session cookie on to the browser which to keeps the session with the browser alive . #datasecurity\u00a0#singlesignon\u00a0\u00a0#liferay\u00a0#liferaydxp\u00a0#liferayExperienceCloud\u00a0#architecture\u00a0#SSO\u00a0#saml\u00a0#openid\u00a0#saml\u00a0\u00a0#oidc\u00a0\u00a0#design<\/p>\n","protected":false},"author":1,"featured_media":5839,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"nf_dc_page":"","om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"site-sidebar-layout":"default","site-content-layout":"default","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"fifu_image_url":"","fifu_image_alt":"","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[78],"tags":[62,64,67,65,25,30,40,63,66,60],"class_list":["post-5950","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-liferay-portal","tag-business-portal","tag-drupal","tag-java-portal","tag-joomla","tag-liferay","tag-liferay-dxp","tag-liferay-dxp-7-4","tag-liferay-portal","tag-web-development","tag-wordpress"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>SSO Architecture using OpenID Connect (OIDC) protocol with Liferay DXP -<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/youngitconsulting.de\/staging\/2187\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SSO Architecture using OpenID Connect (OIDC) protocol with Liferay DXP -\" \/>\n<meta property=\"og:description\" content=\"In continuation with my last article on SSO i.e. (https:\/\/lnkd.in\/eFEYSpqg) , I created a 40 sec flow diagram video . This Flow diagram illustrate SSO Flow using OpenID Connect (OIDC) protocol with Liferay DXP Portal. Following are the steps . Step 1) User request SignIn page using browser , SignIn Page Open up , User clicks on the SignIn Link. Step 2) Liferay redirects to the SignIn page (called Authorization Endpoint)of the OIDC Provider screen (Provider could be Microsoft azure ,google or any other provider). Step 3) User enters the credentials. Step 4) OIDC Provider process the request and generate a Token and sends back to the user browser. Step 5) Browser redirect the request to Liferay Redirect URI along with the Token. Step 6) Liferay Validates the token using Providers JWKS URI which contains the public keys that can verify the token. Once token Validation is successful Liferay adds a session cookie on to the browser which to keeps the session with the browser alive . #datasecurity\u00a0#singlesignon\u00a0\u00a0#liferay\u00a0#liferaydxp\u00a0#liferayExperienceCloud\u00a0#architecture\u00a0#SSO\u00a0#saml\u00a0#openid\u00a0#saml\u00a0\u00a0#oidc\u00a0\u00a0#design\" \/>\n<meta property=\"og:url\" content=\"https:\/\/youngitconsulting.de\/staging\/2187\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\/\" \/>\n<meta property=\"article:published_time\" content=\"2023-06-26T11:56:20+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-07-08T08:01:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/youngitconsulting.de\/staging\/2187\/wp-content\/uploads\/2023\/06\/sso3.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1330\" \/>\n\t<meta property=\"og:image:height\" content=\"822\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"YoungIT\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"YoungIT\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/youngitconsulting.de\\\/staging\\\/2187\\\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/youngitconsulting.de\\\/staging\\\/2187\\\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\\\/\"},\"author\":{\"name\":\"YoungIT\",\"@id\":\"http:\\\/\\\/izg.tnd.mybluehost.me\\\/#\\\/schema\\\/person\\\/b46ed295bea3af3f3a4c263e64c82686\"},\"headline\":\"SSO Architecture using OpenID Connect (OIDC) protocol with Liferay DXP\",\"datePublished\":\"2023-06-26T11:56:20+00:00\",\"dateModified\":\"2023-07-08T08:01:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/youngitconsulting.de\\\/staging\\\/2187\\\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\\\/\"},\"wordCount\":188,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/youngitconsulting.de\\\/staging\\\/2187\\\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/youngitconsulting.de\\\/staging\\\/2187\\\/wp-content\\\/uploads\\\/2023\\\/06\\\/sso3.jpeg?fit=1330%2C822&ssl=1\",\"keywords\":[\"Business portal\",\"Drupal\",\"Java portal\",\"Joomla\",\"Liferay\",\"Liferay DXP\",\"Liferay DXP 7.4\",\"Liferay portal\",\"web development\",\"Wordpress\"],\"articleSection\":[\"Liferay portal\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/youngitconsulting.de\\\/staging\\\/2187\\\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/youngitconsulting.de\\\/staging\\\/2187\\\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\\\/\",\"url\":\"https:\\\/\\\/youngitconsulting.de\\\/staging\\\/2187\\\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\\\/\",\"name\":\"SSO Architecture using OpenID Connect (OIDC) protocol with Liferay DXP -\",\"isPartOf\":{\"@id\":\"http:\\\/\\\/izg.tnd.mybluehost.me\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/youngitconsulting.de\\\/staging\\\/2187\\\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/youngitconsulting.de\\\/staging\\\/2187\\\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/youngitconsulting.de\\\/staging\\\/2187\\\/wp-content\\\/uploads\\\/2023\\\/06\\\/sso3.jpeg?fit=1330%2C822&ssl=1\",\"datePublished\":\"2023-06-26T11:56:20+00:00\",\"dateModified\":\"2023-07-08T08:01:26+00:00\",\"author\":{\"@id\":\"http:\\\/\\\/izg.tnd.mybluehost.me\\\/#\\\/schema\\\/person\\\/b46ed295bea3af3f3a4c263e64c82686\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/youngitconsulting.de\\\/staging\\\/2187\\\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/youngitconsulting.de\\\/staging\\\/2187\\\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/youngitconsulting.de\\\/staging\\\/2187\\\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/youngitconsulting.de\\\/staging\\\/2187\\\/wp-content\\\/uploads\\\/2023\\\/06\\\/sso3.jpeg?fit=1330%2C822&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/youngitconsulting.de\\\/staging\\\/2187\\\/wp-content\\\/uploads\\\/2023\\\/06\\\/sso3.jpeg?fit=1330%2C822&ssl=1\",\"width\":1330,\"height\":822},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/youngitconsulting.de\\\/staging\\\/2187\\\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/youngitconsulting.de\\\/staging\\\/2187\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SSO Architecture using OpenID Connect (OIDC) protocol with Liferay DXP\"}]},{\"@type\":\"WebSite\",\"@id\":\"http:\\\/\\\/izg.tnd.mybluehost.me\\\/#website\",\"url\":\"http:\\\/\\\/izg.tnd.mybluehost.me\\\/\",\"name\":\"\",\"description\":\"IT Consulting , Liferay DXP , Salesforce , Java Consulting\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"http:\\\/\\\/izg.tnd.mybluehost.me\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"http:\\\/\\\/izg.tnd.mybluehost.me\\\/#\\\/schema\\\/person\\\/b46ed295bea3af3f3a4c263e64c82686\",\"name\":\"YoungIT\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/45f6160db01519229a2463b514b42085e51d1816913b18ffa5181a439cc7999c?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/45f6160db01519229a2463b514b42085e51d1816913b18ffa5181a439cc7999c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/45f6160db01519229a2463b514b42085e51d1816913b18ffa5181a439cc7999c?s=96&d=mm&r=g\",\"caption\":\"YoungIT\"},\"sameAs\":[\"http:\\\/\\\/box2537\\\/cgi\\\/addon_GT.cgi?s=GT::WP::Install::EIG+%28izgtndmy%29+-+127.0.0.1+%5Bnocaller%5D\"],\"url\":\"https:\\\/\\\/youngitconsulting.de\\\/staging\\\/2187\\\/author\\\/izgtndmy\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SSO Architecture using OpenID Connect (OIDC) protocol with Liferay DXP -","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/youngitconsulting.de\/staging\/2187\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\/","og_locale":"en_US","og_type":"article","og_title":"SSO Architecture using OpenID Connect (OIDC) protocol with Liferay DXP -","og_description":"In continuation with my last article on SSO i.e. (https:\/\/lnkd.in\/eFEYSpqg) , I created a 40 sec flow diagram video . This Flow diagram illustrate SSO Flow using OpenID Connect (OIDC) protocol with Liferay DXP Portal. Following are the steps . Step 1) User request SignIn page using browser , SignIn Page Open up , User clicks on the SignIn Link. Step 2) Liferay redirects to the SignIn page (called Authorization Endpoint)of the OIDC Provider screen (Provider could be Microsoft azure ,google or any other provider). Step 3) User enters the credentials. Step 4) OIDC Provider process the request and generate a Token and sends back to the user browser. Step 5) Browser redirect the request to Liferay Redirect URI along with the Token. Step 6) Liferay Validates the token using Providers JWKS URI which contains the public keys that can verify the token. Once token Validation is successful Liferay adds a session cookie on to the browser which to keeps the session with the browser alive . #datasecurity\u00a0#singlesignon\u00a0\u00a0#liferay\u00a0#liferaydxp\u00a0#liferayExperienceCloud\u00a0#architecture\u00a0#SSO\u00a0#saml\u00a0#openid\u00a0#saml\u00a0\u00a0#oidc\u00a0\u00a0#design","og_url":"https:\/\/youngitconsulting.de\/staging\/2187\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\/","article_published_time":"2023-06-26T11:56:20+00:00","article_modified_time":"2023-07-08T08:01:26+00:00","og_image":[{"width":1330,"height":822,"url":"https:\/\/youngitconsulting.de\/staging\/2187\/wp-content\/uploads\/2023\/06\/sso3.jpeg","type":"image\/jpeg"}],"author":"YoungIT","twitter_card":"summary_large_image","twitter_misc":{"Written by":"YoungIT","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/youngitconsulting.de\/staging\/2187\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\/#article","isPartOf":{"@id":"https:\/\/youngitconsulting.de\/staging\/2187\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\/"},"author":{"name":"YoungIT","@id":"http:\/\/izg.tnd.mybluehost.me\/#\/schema\/person\/b46ed295bea3af3f3a4c263e64c82686"},"headline":"SSO Architecture using OpenID Connect (OIDC) protocol with Liferay DXP","datePublished":"2023-06-26T11:56:20+00:00","dateModified":"2023-07-08T08:01:26+00:00","mainEntityOfPage":{"@id":"https:\/\/youngitconsulting.de\/staging\/2187\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\/"},"wordCount":188,"commentCount":0,"image":{"@id":"https:\/\/youngitconsulting.de\/staging\/2187\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/youngitconsulting.de\/staging\/2187\/wp-content\/uploads\/2023\/06\/sso3.jpeg?fit=1330%2C822&ssl=1","keywords":["Business portal","Drupal","Java portal","Joomla","Liferay","Liferay DXP","Liferay DXP 7.4","Liferay portal","web development","Wordpress"],"articleSection":["Liferay portal"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/youngitconsulting.de\/staging\/2187\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/youngitconsulting.de\/staging\/2187\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\/","url":"https:\/\/youngitconsulting.de\/staging\/2187\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\/","name":"SSO Architecture using OpenID Connect (OIDC) protocol with Liferay DXP -","isPartOf":{"@id":"http:\/\/izg.tnd.mybluehost.me\/#website"},"primaryImageOfPage":{"@id":"https:\/\/youngitconsulting.de\/staging\/2187\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\/#primaryimage"},"image":{"@id":"https:\/\/youngitconsulting.de\/staging\/2187\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/youngitconsulting.de\/staging\/2187\/wp-content\/uploads\/2023\/06\/sso3.jpeg?fit=1330%2C822&ssl=1","datePublished":"2023-06-26T11:56:20+00:00","dateModified":"2023-07-08T08:01:26+00:00","author":{"@id":"http:\/\/izg.tnd.mybluehost.me\/#\/schema\/person\/b46ed295bea3af3f3a4c263e64c82686"},"breadcrumb":{"@id":"https:\/\/youngitconsulting.de\/staging\/2187\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/youngitconsulting.de\/staging\/2187\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/youngitconsulting.de\/staging\/2187\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\/#primaryimage","url":"https:\/\/i0.wp.com\/youngitconsulting.de\/staging\/2187\/wp-content\/uploads\/2023\/06\/sso3.jpeg?fit=1330%2C822&ssl=1","contentUrl":"https:\/\/i0.wp.com\/youngitconsulting.de\/staging\/2187\/wp-content\/uploads\/2023\/06\/sso3.jpeg?fit=1330%2C822&ssl=1","width":1330,"height":822},{"@type":"BreadcrumbList","@id":"https:\/\/youngitconsulting.de\/staging\/2187\/sso-architecture-using-openid-connect-oidc-protocol-with-liferay-dxp\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/youngitconsulting.de\/staging\/2187\/"},{"@type":"ListItem","position":2,"name":"SSO Architecture using OpenID Connect (OIDC) protocol with Liferay DXP"}]},{"@type":"WebSite","@id":"http:\/\/izg.tnd.mybluehost.me\/#website","url":"http:\/\/izg.tnd.mybluehost.me\/","name":"","description":"IT Consulting , Liferay DXP , Salesforce , Java Consulting","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"http:\/\/izg.tnd.mybluehost.me\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"http:\/\/izg.tnd.mybluehost.me\/#\/schema\/person\/b46ed295bea3af3f3a4c263e64c82686","name":"YoungIT","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/45f6160db01519229a2463b514b42085e51d1816913b18ffa5181a439cc7999c?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/45f6160db01519229a2463b514b42085e51d1816913b18ffa5181a439cc7999c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/45f6160db01519229a2463b514b42085e51d1816913b18ffa5181a439cc7999c?s=96&d=mm&r=g","caption":"YoungIT"},"sameAs":["http:\/\/box2537\/cgi\/addon_GT.cgi?s=GT::WP::Install::EIG+%28izgtndmy%29+-+127.0.0.1+%5Bnocaller%5D"],"url":"https:\/\/youngitconsulting.de\/staging\/2187\/author\/izgtndmy\/"}]}},"jetpack_featured_media_url":"https:\/\/i0.wp.com\/youngitconsulting.de\/staging\/2187\/wp-content\/uploads\/2023\/06\/sso3.jpeg?fit=1330%2C822&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/youngitconsulting.de\/staging\/2187\/wp-json\/wp\/v2\/posts\/5950","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/youngitconsulting.de\/staging\/2187\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/youngitconsulting.de\/staging\/2187\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/youngitconsulting.de\/staging\/2187\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/youngitconsulting.de\/staging\/2187\/wp-json\/wp\/v2\/comments?post=5950"}],"version-history":[{"count":5,"href":"https:\/\/youngitconsulting.de\/staging\/2187\/wp-json\/wp\/v2\/posts\/5950\/revisions"}],"predecessor-version":[{"id":5958,"href":"https:\/\/youngitconsulting.de\/staging\/2187\/wp-json\/wp\/v2\/posts\/5950\/revisions\/5958"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/youngitconsulting.de\/staging\/2187\/wp-json\/wp\/v2\/media\/5839"}],"wp:attachment":[{"href":"https:\/\/youngitconsulting.de\/staging\/2187\/wp-json\/wp\/v2\/media?parent=5950"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/youngitconsulting.de\/staging\/2187\/wp-json\/wp\/v2\/categories?post=5950"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/youngitconsulting.de\/staging\/2187\/wp-json\/wp\/v2\/tags?post=5950"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}