Skip to content

Integrate Faction into OIDC Solutions

Faction seamlessly integrates with your existing enterprise authentication solutions, ensuring a smooth and secure user experience. Leveraging widely adopted solutions such as LDAP and OIDC, Faction effortlessly integrates into any enterprise environment. Our platform is designed to adapt to your authentication infrastructure, providing a hassle-free implementation process and enhancing the overall efficiency of your organization’s security framework. With Faction, you can trust in a unified and streamlined authentication experience tailored to your enterprise needs.

The article will walk through the steps needed to integrate Faction into Google Auth, Auth0, or Ping Identity

Google OIDC Setup

  1. Log into your company’s Google API Console.
  2. Click on Credentials from the left navigation.
  3. Click + Create Credentials from the top navigation.
  4. Select OAuth Client ID.
  5. Select Web Application as the application type.
  6. Name the application something specific like Faction OIDC Integration. But the name does not matter.
  7. Under Authorized redirect URLs click + ADD URI.
  8. Enter the domain of your Faction Instance and append /oauth/callback?client_name=OidcClient to the path. Example: If you used Faction to host the site your URL would look like this:
    https://furry-hyena-1111.factionsecurity.com/oauth/callback?client_name=OidcClient
  9. Then Click Create.
  10. Take Note of the Client Id and Client Secret. This will be used later in the Faction Admin Section.

Your Setup should look like the following:

Auth0 OAuth Setup

  1. Log into your Auth0 Console.
  2. Select Applications in the left navigation.
  3. Click + Create Application
  4. Select Regular Web Application.
  5. Name it something like Faction OAuth Integration.
  6. Click Create.
  7. Ignore the Quick Start screen and Click Settings.
  8. In the Allowed Callback URLs, enter the domain of your Faction Instance and append /oauth/callback?client_name=OidcClient to the path. Example: If you used Faction to host the site your URL would look like: https://furry-hyena-1111.factionsecurity.com/oauth/callback?client_name=OidcClient
  9. Take Note of the Client Id and Client Secret. This will be used later in the Faction Admin.
  10. Scroll down to the bottom and Click Advanced and then Endpoints
  11. Take note of the OpenId Configuration URL

Ping Identity Setup

  1. Log into Ping Identity Console
  2. Select Applications.
  3. Add a New Application.
  4. Give the Application a name like Faction.
  5. Select OIDC Web App.
  6. Click Save.
  7. Open the newly created application and select the Configuration tab:
  8. Click the Edit Button in the upper right corner
  9. Scroll down to the Redirect URI Section and enter your Host Name with the path /oauth/*. (Example: https://furry-hyena-1111.factionsecurity.com/oauth/*)
  10. Click Enable Redirect Patterns.
  11. Click Save.
  12. Scroll up to the top of the configuration.
  13. Expend URLs and take note of the the OIDC Discovery Endpoint. This will be used later in the Configure Faction Section.
  14. Take Note of the Client Id and the Client Secret. These will be used in the Configure Faction Section
  15. Click the Attribute Mappings tab.
  16. Add email as an attribute.
  17. Click Save.

Configure Faction

  1. Log into Faction as an admin user.
  2. Navigate to Admin -> Users.
  3. In the OAuth2.0 Configuration enter the Client Id you noted earlier from either Auth0, Google, or Ping.
  4. Enter the Client Secret you noted earlier.
  5. Enter the Discovery URL as follows:
    1. Google: https://accounts.google.com/.well-known/openid-configuration
    2. Auth0: Enter the Open Id Configuration URL you noted in step 11 above.
    3. Ping: Enter the OIDC Discovery Endpoint from step 13 above.
  6. Click Save

Adding an OAuth User

  1. Under Admin -> Users, Click Add User.
  2. The Username should be part of the user’s email address before the @ symbol. If the email is [email protected] then the username is test.user
  3. ⭐️Leave the Password Field Blank.⭐️
  4. Enter the First and Last name.
  5. Enter the email address that is used by the OAuth solution to authenticate the user.
  6. Select OAuth 2.0 as the Authentication Method.
  7. Click Save Changes.

When the new user reaches the Login Screen they can enter just their username without a password and click Login. Faction will redirect the user to the configured Authentication Provider and redirect back.