Adding an external IdP

Entrust provides IDaaS as the default Identity Provider (IdP) for PKIaaS users. You can replace the default provider by adding an external OpenID Connect (OIDC) provider.

To add an external identity provider:

1. Configure an account on an external OpenID Connect (OIDC) identity provider.

    User email addresses in the external identity provider must match those on Entrust Cloud Console.

2. Navigate to the Entrust Cloud Console at https://my.cloud.entrust.com. If you are logged in to the PKIaaS interface, you can click Cloud Console in the top-left selector.

   

3. In the Cloud Console, navigate to Settings > Identity Provider.

   

4. Click Add External Provider and complete the following steps.

   • Add Cloud Console to OIDC
   • Add Details and Secrets from OIDC
   • Test & Submit
    We recommend keeping the OpenID Connect console open in a different browser tab while performing the steps below.

Add Cloud Console to OIDC

In this step:

1. Copy the Login Redirect URI and Logout Redirect URI values.

   

2. Paste them into the fields with the same name in your OpenID Connect account.

3. Click Next.

Add Details and Secrets from OIDC

In this step, configure the following settings, then click Next.

Test & Submit

In this step:

1. Click Test Connection to trigger authentication with the external OpenID Connect provider.

   

2. Authenticate with your OpenID Connect account credentials.

3. After successful authentication, click Show Advanced Options to display the automatically populated endpoint parameters.

4. Click Submit. You will receive a confirmation email in your inbox.