You use the SWITCHAUTHMODE utility to store authentication configurations on the OpenEdge Command Center server and to select the configuration that is active. Adding a configuration does not change the running authentication mode. Only activation changes the mode, and the change takes effect after you restart the OpenEdge Command Center server.

SWITCHAUTHMODE prompts you for the configuration details, one at a time. You enter the configuration name, provider, issuer URL, client ID, client secret, redirect URI, scope, and optional roles claim path, when prompted. The client secret is not echoed.

Prerequisites

Before you begin, ensure that the following conditions are met:

  • OpenEdge Command Center is registered as an application in the identity provider, the required app roles are created and assigned, and the access token is in JWT format. For example, configure a custom API scope in Microsoft Entra ID or a custom authorization server in Okta. Ensure that a refresh token is enabled.
  • Users that are assigned the role:oecc/oecc_admin app role can view all agents and their partition IDs, but do not automatically see full details for every agent. Users assigned only agent roles can view and manage only the agents for those roles. Users without any OpenEdge Command Center app role can sign in but cannot view OpenEdge Command Center or agent details.
  • You can sign into the OpenEdge Command Center server host with root privileges on Linux, or with Administrator privileges on Windows.
  • You can restart the OpenEdge Command Center server.