MediaSeal supports authentication through an external identity provider using OpenID Connect (OIDC).

Before you begin

Ensure that you have:

• Administrator access to the MediaSeal server.
• Administrator access to your identity provider.
• An OIDC client ID and client secret.
• The provider URL for your identity provider.
• Permission to configure callback URIs in the identity provider.

Configure OIDC in MediaSeal

1. Sign in to your MediaSeal server either via a web browser or via the MediaSeal App and open Settings.

2. Under Configure Identity Provider, select Add +.

3. Select the OIDC tab.
   

4. In the Name field, enter a recognisable name for the identity provider.

5. Enter the Client ID supplied by your identity provider.

6. Enter the Client Secret supplied by your identity provider.

   The client secret must contain at least eight characters.

7. Enter the identity provider's Provider URL.

8. Under Callback URI, copy each URI displayed by MediaSeal.

9. Add the copied callback URIs to the OIDC application configuration in your identity provider.

10. Confirm that the client ID, client secret, provider URL and callback URIs match in both systems.

11. Select Configure to save the identity provider.

Verify the configuration

After saving the configuration:

1. Confirm that the provider appears under Identity Providers.

2. Attempt to sign in using an account managed by the identity provider.

3. Confirm that authentication redirects to the identity provider and returns the user to MediaSeal successfully.

If authentication fails, check the client credentials, provider URL and callback URI configuration in both systems.