General Configuration

For all identity providers :

The following settings are applicable to all Identity Providers. Please read each item carefully:

• Callback URL: https://analytics.webtrends.com/auth/oidc
• Application Type: If your identity provider requires an application type, use the "Single Page App" application type.
• Username Format: The user's email address must match the Webtrends User's username.
• Signing Algorithm: SSO requires the RS256 token signing algorithm. This is default for most OIDC SSO providers.

When using Azure :

1. User accounts must have the email field defined.
2. The following App claims are required:
   Token Type: ID
   Claim: Email
3. The following API permissions are needed:
   Microsoft Graph > email, openid