How to configure Zitadel OAuth login in Bold BI

Create a new project

Please refer to the following documentation and create a new project if needed. Otherwise, you can create a new application in the default project.
https://zitadel.com/docs/guides/manage/console/projects

Create a new OAuth application

Please follow the below steps to create a new application.

1. Click the New option to create application.
   
   
2. Enter the application name and select the type of application as Web.
   
   
3. Select the Authentication method as Code.
   
   
4. Please enter the redirect URI.
   
   

Redirect URI is also available in Bold BI OAuth Configuration page. For example, if you have hosted Bold BI on https://example.com and your redirect URI will be https://example.com/signin-oauth.

5. Review the application configuration and create.
   

   

6. Once the application is created, client id and secret will be shown in a popup. Copy the information and save them in a secret place since you can’t get the same client secret next time.
   

   

Zitadel OAuth Endpoints

Use the following endpoint to get the required endpoints to configure Bold BI.

https://your-zitadel-domain/.well-known/openid-configuration

• Authorize Endpoint: https://your-zitadel-domain/oauth/v2/authorize
• Token Endpoint: https://your-zitadel-domain/oauth/v2/token
• Userinfo Endpoint: https://your-zitadel-domain/oidc/v1/userinfo

Configure Zitadel in Bold BI

1. Please open https://your-domain/ums/administration/sso?view=oauth-settings or navigate to Settings -> Authentication -> OAuth 2.0.
2. Configure the following values.
   1. Provider Name - Name of the OAuth provider.
   2. Provider Logo - Upload your logo.
   3. Authorization Endpoint - Please refer to the previous section to get the authorization endpoint.
   4. Token Endpoint - Please refer to the previous section to get the token endpoint.
   5. Userinfo Endpoint - Please refer to the previous section to get the user info endpoint.
   6. Client Id - Use the client id value from the Zitadel OAuth application.
   7. Client Secret - Use the client id value from the Zitadel OAuth application.
   8. Enable User Account Creation - Enable this if you want to automatically create a new user if the account is not yet available.
   9. User data - Map the following claim to get the proper user information.
      1. Email - email