Before you begin, ensure that the following conditions are met:

  • OpenEdge Command Center is registered as an application in the identity provider. The required app roles are created and assigned to users. The identity provider must include assigned OpenEdge Command Center app roles in the access_token, which must be in JWT format. Ensure that a refresh token is enabled. For provider-specific information, see the documentation for your identity provider.
  • Users assigned the role:oecc/oecc_admin app role can view all agent names and their partition IDs. This role does not automatically grant full access to every agent. Users must also be assigned the appropriate agent roles to view and manage those agents. Users without an OpenEdge Command Center app role can sign in but cannot view OpenEdge Command Center or agent details.
  • You can sign in to the OpenEdge Command Center server host with root privileges on Linux or Administrator privileges on Windows.
  • You can restart the OpenEdge Command Center server.

To activate an identity provider configuration, perform the following steps:

  1. On the OpenEdge Command Center server host, open a command-line interface with root privileges on Linux or Administrator privileges on Windows. Go to the <OECC-server-installation-directory>\Server\utils directory.
  2. To add the identity provider configuration, run the following command:
    switchauthmode --add

    The utility prompts you to enter the configuration name, provider, issuer URL, client ID, client secret, redirect URI, scope, and optional roles claim path. Enter the values supplied by your identity provider Administrator. The client secret is not displayed as you type it.

    Adding a configuration does not change the active authentication mode. Users continue to sign in locally until you activate the configuration.

  3. To confirm that the configuration is stored and that the local configuration is still active, run the following command:
    switchauthmode --list
  4. Activate the identity provider configuration. Replace <configuration-name> with the name you entered when adding the configuration:
    switchauthmode --activate "<configuration-name>"
  5. Go to the <OECC-server-installation-directory>\Server directory, and restart the OpenEdge Command Center server:
    oeccserver stop oeccserver start

    In a high-availability deployment, restart every server so that each server reads the active configuration at startup.

  6. Open the OpenEdge Command Center URL. Confirm that the login page displays the Sign in with OAuth button and no longer displays the user name and password fields.
  7. Users that are assigned the role:oecc/oecc_admin app role can view agent names and partition IDs in the Agents grid. The identity provider administrator can use a partition ID when creating the corresponding agent app roles.