OpenID Connect Settings

The OpenID Connect Settings section allows you to integrate WSM with an OpenID Connect (OIDC) identity provider to enable Single Sign-On (SSO), delivering secure and streamlined user authentication.

Supported providers include:

• Microsoft Entra ID (Azure AD)

• Okta

• Duo

• Ping Identity

• Other standards-compliant OIDC providers

When using Microsoft Entra ID for SSO, the App Registration should use Delegated API Permissions.

Required API Permissions (Delegated)

Permission	Type
User.Read.All	Delegated
Group.Read.All	Delegated

These permissions allow WSM to:

• Authenticate users

• Retrieve user profile information

• Read user group membership during login

• Apply role and entitlement mappings

Typical OIDC configuration includes:

• Client ID

• Client Secret

• Tenant ID / Authority URL

• Redirect URI

• Scopes

• Claims mapping