Spotfire Server: Integrating OpenID Connect with Auth0 Identity provider

This article provides instructions on how to configure Auth0 Identity provider with Spotfire Server.

Prerequisites:

• Create an Account in Auth0 Identity provider (https://auth0.com/)

Resolution:

1. Login to https://auth0.com/ to register a new application by selecting "Applications" section in the left navigation bar:

2. Click on "Create Application" and set the application type to "Regular Web application":

3. Take note of its Client ID and Client Secret as you will need these to create the connection in the Spotfire Server Configuration Tool:

4. Open Spotfire Server Configuration Tool on Spotfire Server machine, navigate to "Configuration" tab, then click "Public Address". Set "Enable custom public address" to "Yes", and enter the "Public address URL" in a form http[s]://<spotfire server>[:<port>]/

(Note: You do not need to mention the port address if it is default one i.e., "80" or "443")

5. Select "OpenID Connect" on the left, then set "Enable OpenID Connect" to "Yes", and copy the configured public address URL as the “Return endpoint”.
Return endpoint URL is in a form http[s]://<spotfire server>[:<port>]/spotfire/auth/oidc/authenticate

6. Click on "Add new provider" and add Provider name (Auth0) and Discovery Document URL  (https://spotfire.auth0.com/.well-known/openid-configuration), Client ID and Client Secret generated by Auth0 (generated in step 3 above):

Note: It is recommended to use the "Auto-create" option for the post-authentication filter (so that successfully authenticated users are automatically created in the Spotfire Server's user directory database), as set here:

• Spotfire Server Configuration Tool > Configuration > Post Authentication Filter > Default filter mode: Auto-create

7. Go back to Auth0 dashboard, add Spotfire Server's login callback to the list of Allowed Callback URLs as https://<spotfire_server>/spotfire/auth/oidc/authenticate (this is the "Return endpoint" URL from the Spotfire Server Configuration Tool-> OpenID Connect window) and save changes:

8. Go to Spotfire Server Configuration Tool, save the new configuration to the database and restart the Spotfire Server.

Reference: Registering an app in Auth0: https://auth0.com/

Reference: Configuring OpenID Connect:
https://docs.tibco.com/pub/spotfire_server/latest/doc/html/TIB_sfire_server_tsas_admin_help/server/topics/configuring_openid_connect.html