Adding UCCE SSO Identity Provider

Purpose of this guide: This page is a part of the procedure to configure UCCE as an Identity Provider for User Management (enable UCCE SSO). This configuration should be done in User Management.
Audience: a user with access and credentials to User Management
Previous steps: Ensure that the certificates that are not trusted by default are imported (for example when the UCCE server uses a self-signed certificate).
When: When configuring UCCE as an Identity Provider for User Management (enabling UCCE SSO)
Next steps: This is the only step.

Follow the steps to add a new Identity Provider in User Management:

Go to Authentication providers. Then click the Add new button.
Select the provider type UCCE SSO Connect and click Add.
The Add provider pane will open on the right. The default alias will be set to 'ucce-sso' and a newly generated Redirect URI will display at the top.
Copy the URI, as it will be needed in the next step. Do not close this screen, as it cannot be saved without providing further data from UCCE.
Log in to the UCCE Identity Service Management console to register a new client – follow the instruction on the Registering a New UCCE Client page, then continue on this page with point 4.
Fill the UCCE SSO Connect Config section with the configuration of the UCCE instance:

Provide the following values:

Authorization URL – should be defined in UCCE, check your UCCE documentation if not sure (usually it is: https://<server_where_CUIC_is_installed>/ids/v1/oauth/authorize)
Client ID – the value copied from the new UCCE client configuration (in step 4).
Token URL – should be defined in UCCE, check your UCCE documentation if not sure (usually it is: https://<server_where_CUIC_is_installed>/ids/v1/oauth/access_token)

In some deployments, it may be necessary to specify a port 8553, for example, https://<server_where_CUIC_is_installed>:8553/ids/v1/oauth/authorize and https://<server_where_CUIC_is_installed>:8553/ids/v1/oauth/access_token).

Note that the Display Name parameter represents the name of the button displayed on the login screen. By default, it is set to 'UCCE SSO Connect'.

Click Save to add the Identity Provider. The login via UCCE SSO is ready to use.
When accessing the Eleveo application, there should already be the UCCE SSO Connect button on the login page.