To add a generic OpenID Connect (OIDC) provider to Ory Kratos, you need to define a redirect URL. The pattern for the redirect URL is as follows:

http(s)://<domain-of-ory-kratos>:<public-port>/self-service/methods/oidc/callback/<social-signin-provider-id>

Replace

<domain-of-ory-kratos>

,

<public-port>

, and

<social-signin-provider-id>

with your specific values. This URL should be set as the redirect URI in your OIDC provider's configuration. For more detailed steps on adding a social sign-in provider, you can refer to the [Ory documentation](https://www.ory.sh/docs/self-hosted/kratos/configuration/oidc).

The social sign-in provider ID is a unique identifier that you set in your social sign-in configuration. It is used to identify the specific social sign-in provider you are integrating with Ory Kratos. When you are configuring a social sign-in provider, you define this ID. For example, in the case of adding a generic provider, you define the "Provider name" which serves as the ID. Similarly, when adding specific providers like Microsoft or Apple, the ID would typically be a predefined string like "microsoft" or "apple". In the context of importing social sign-in connections, the

provider

field in the configuration JSON is where you specify this ID. Here's an example:

json {  "credentials": {   "oidc": {    "config": {     "providers": [      {       "provider": "github",       "subject": "12345"      },      {       "provider": "google",       "subject": "12345"      }     ]    }   }  } }

In this example, "github" and "google" are the provider IDs. For more details, you can refer to the [Ory documentation](https://www.ory.sh/docs/kratos/manage-identities/import-user-accounts-identities#social-sign-in-connections).