Hi All. We have SSO set up with an OIDC provider. ...
# general
h
Hi All. We have SSO set up with an OIDC provider. In some cases we want to override the URL at which Kratos initiates the SSO flow, to be different from the one returned from the well known endpoint (i.e. the
authorization_endpoint
value returned from the well known endpoint). If we set the
auth_url
in the Kratos config to be different from the value returned from the well known endpoint, it seems to have no impact. Should it be able to do this? (I can't find out much information in the docs about exactly what
auth_url
is, so maybe I'm misunderstanding it.) Secondly, not only do we want to override the URL, but part of the URL is a value which is only known at runtime (and which could be different for different users). i.e. the URL should be
<https://foo/bar/><some-uuid>
, where
some-uuid
is a value based on some earlier API call we make to an external system. So ideally when we initiate the SSO flow we want to pass
some-uuid
to Kratos so that it can use that to build the URL. Does anyone know if this is possible, or if there's any documentation about anything like this? Thanks in advance!