> ## Documentation Index
> Fetch the complete documentation index at: https://docs.usedatabrain.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Oidc Identity Provider (Idp)

<Steps>
  <Step>
    Navigate to **MFA\&SSO Settings** section on **Settings** page.
  </Step>

  <Step>
    Enable **SSO.**
  </Step>

  <Step>
    Click on **Save** button.
  </Step>

  <Step>
    Click on **+IDP** button.
  </Step>

  <Step>
    In the **New IDP** form fill the following details:

    * **Provider Type:** Choose **OIDC** provider

    * **Alias:** Choose unique id for the IDP. *eg:* oidc-idp-1

    * **Sign-In Redirect URI:** Copy this and use this endpoint as redirect uri to create a application in Identity provider(Okta).

    * **Logout Redirect URI:** Copy this and use this endpoint as post logout redirect URIs that can be sent by the Service Provider(Databrain App) in the logout request to Identity Provider(Okta).

    * **Display Name:** Choose any name for your IDP.

    * **Issuer:** Enter your Identity Provider's **Issuer(ID)**. In Okta, you can get it from the configuration link which looks like [https://dev-61653336-admin.okta.com/.well-known/openid-configuration](https://dev-61653336-admin.okta.com/.well-known/openid-configuration) eg: [https://dev-61653336.okta.com](https://dev-61653336.okta.com/)

    * **Authorization Url:** Enter your Identity provider's **Authorization Endpoint**. In Okta, you can get it from the configuration link which looks like [https://dev-61653336-admin.okta.com/.well-known/openid-configuration](https://dev-61653336-admin.okta.com/.well-known/openid-configuration) eg: [https://dev-61653336.okta.com/oauth2/v1/authorize](https://dev-61653336.okta.com/oauth2/v1/authorize)

    * **Token Url:** Enter your Identity provider's **Token Endpoint**. In Okta, you can get it from the configuration link which looks like [https://dev-61653336-admin.okta.com/.well-known/openid-configuration](https://dev-61653336-admin.okta.com/.well-known/openid-configuration) eg: [https://dev-61653336.okta.com/oauth2/v1/token](https://dev-61653336.okta.com/oauth2/v1/token)

    * **Logout Url:** Enter your Identity provider's **Logout Endpoint**. In Okta, you can get it from the configuration link which looks like [https://dev-61653336-admin.okta.com/.well-known/openid-configuration](https://dev-61653336-admin.okta.com/.well-known/openid-configuration) eg: [https://dev-61653336.okta.com/oauth2/v1/logout](https://dev-61653336.okta.com/oauth2/v1/logout)

    * **Client ID:** Enter the  **Client ID**of your Identity Provider application.

    eg: 0oaodey86daNSpLoL5\*\*
  </Step>

  <Step>
    Click on **Create IDP** button.

    <CardGroup cols={2}>
      <Card title="OIDC IDP" href="https://1652544998-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FkUbjEzcTXrWaOrO7wsuI%2Fuploads%2FJsKn2AkZU4WebVq9vgwJ%2FOIDC%20IDP.mp4?alt=media\&token=7cbfe455-8e7b-4a69-922b-2a6c21efa820" icon="file-arrow-down" horizontal />
    </CardGroup>
  </Step>
</Steps>