Viewing Claims for OpenID Connect Users

You can use claims to assign OpenID Connect users to roles and to update their SystemLink username.

  1. Log into the server running SystemLink, navigate to C:\Program Files\National Instruments\Shared\Web Server\conf\defines.d\, and open 50_mod_auth_openidc-defines.conf in a text editor.
  2. Change the configuration UnDefine AUTH_OIDC_ENABLE_CLAIM_INFO to Define AUTH_OIDC_ENABLE_CLAIM_INFO. Your file should look similar to the following example. 
    #
# Defined OpenID-Connect configuration for the Windows Apache installation.
#

# The name of the JSON map containing metadata about each identity provider.
Define AUTH_OIDC_ATTRIBUTES_KEY ni-attributes

# CA bundle to use when making requests to an identity provider.
Define AUTH_OIDC_BUNDLE ../nicurl/ca-bundle.crt

# Path to OIDC provider configuration.
Define AUTH_OIDC_PROVIDER_DIR ${HTCONF_PATH}/openidc

# The location to redirect when performing an OpenID-Connect login.
Define AUTH_OIDC_REDIRECT_URI /login/openidc-redirect

#
# User-editable variables.
#

# Whether OIDC is enabled.
Define AUTH_OIDC_ENABLED

# When enabled, /login/openidc-redirect?info=json and
# /login/openidc-redirect?info=html will return the claims for the currently
# logged in user.
Define AUTH_OIDC_ENABLE_CLAIM_INFO
  3. If the provider is https and has a certificate signed by a CA that is not included in the NI-CURL CA bundle at C:\Program Files\National Instruments\Shared\nicurl\ca-bundle.crt, update AUTH_OIDC_BUNDLE to point to a CA bundle that contains the provider CA. The path can be absolute or relative to C:\Program Files\National Instruments\Shared\Web Server.
  4. Save the file and restart NI Web Server.
  5. Navigate to the following addresses to view user claims.
    protocol://systemlink-dns/login/openidc-redirect?info=type

    Where

    • protocol is https:// or http://.
    • systemlink-dns is the port of the SystemLink server. You can omit the port if you are using port 80 or 443.
      Note NI recommends the DNS name in the redirect URI match the preferred hostname set in NI Web Server Configuration on the SystemLink server.
    • type is either html or json.