oidc-agent
Search…
EGI
EGI Check-in supports dynamic registration, but dynamically registered clients will not have any scopes. Therefore, users have to either register a client manually or use a preregistered public client (recommended).
Example:
1
$ oidc-gen --pub --issuer https://aai.egi.eu/oidc \
2
--scope "email \
3
eduperson_entitlement \
4
eduperson_scoped_affiliation \
5
eduperson_unique_id" <shortname>
Copied!
You will need to follow the OIDC-flow, which usually involves authentication in a web-browser. If the browser does not start, you can copy paste the displayed URL.
1
[...]
2
Generating account configuration ...
3
accepted
4
To continue and approve the registered client visit the following URL in a Browser of your choice:
5
https://[...]
6
[...]
7
Polling oidc-agent to get the generated account configuration .....success
8
The generated account config was successfully added to oidc-agent. You don't have to run oidc-add.
Copied!
Finally, you will be be asked for a password on the commandline to safely store your credentials.
1
Enter encryption password for account configuration '<shortname>':
2
Confirm encryption Password:
Copied!
Note: You need to run the webbrowser on the same host as the
oidc-gen command.
If you operate on a remote machine, you need to use the device code flow, by adding --flow=device to the above commandline.Advanced users may succeed by otherwise ensuring that the browser you are using can connect to the host on which
oidc-gen and oidc-agent run on ports 4242, 8080 or 43985.Last modified 4mo ago
Copy link