Generic OpenID Connect

This document covers step two of the Single sign-on (SSO) setup process, and shouldn’t be completed independently.

1. Log in to your identity provider.

2. Create a new application.

3. If prompted for the application type, select Web.

4. Enter https://id.matillion.com/login/callback as the Redirect URL or Sign In URL.

   id.matillion.com is Matillion’s authentication domain for single sign-on (SSO). Enter this URL in your identity provider’s configuration as instructed—users should not navigate to it directly, as authentication must be initiated through your identity provider or the Maia login page.

5. Create a secret if none is created automatically.

6. Copy the secret and make a note of it for later.

   Contact us to arrange for the secret to be rotated before the existing one expires to avoid minimal interruption to your users.

7. Copy the Client ID and make a note of it for later.

8. Copy the OpenID Connect metadata URL; this will end with /.well-known/openid-configuration.

9. Continue the steps in Single sign-on (SSO) setup.