Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.


OIDC Identity ProviderĀ 


It is possible to configureĀ  configure Usage Engine to take on the role of the 'identity provider' (IdP) in the OpenID Connect Authorization Code Flow described in


OIDC Client Configuration

For an OIDC client to useĀ  use Usage Engine as an OIDC IdP, it needs some configuration to make it able to find and use the IdP APIs correctly. This can be done either through Endpoint Discovery or through Manually Configured Endpoints.


If the OIDC client supports Provider Configuration service discovery (, it is enough to configure the issuer URL of the Usage Engine IdP for the client to be able to find the URL of all endpoints. The URL must be reachable from the OIDC client. Refer to the client documentation for details on how to set issuer URL.


The service discovery support in Usage Engine currently does not include Issuer Discovery ('/.well-known/webfinger'), only Provider Configuration Discovery ('/.well-known/openid-configuration').


The below configuration example configures a Grafana installation as OIDC client to the Usage Egnine Identity Provider available at the URL Note that this example uses manually configured endpoints and does not include the Issuer URL.