The EmpowerID SSO framework allows you to configure LinkedIn as an identity provider for the EmpowerID Web application. EmpowerID integrates with LinkedIn using the OAuth protocol to allow your users to log in to EmpowerID using their LinkedIn accounts.
| Info |
|---|
As a prerequisite to creating an SSO Connection for LinkedIn as an Identity Provider, you must have a LinkedIn account and register the EmpowerID web application for your organization under "My Applications" in the LinkedIn Developer Network. This creates a set of values known by the API Key and the API Secret (these values are generated by LinkedIn), as well as the OAuth 1.0 Accept Redirect URLs (this value is entered by you to tell LinkedIn where to post the assertion of a user's identity to the EmpowerID Assertion Consumer Service). For specific directions on registering EmpowerID as an application in LinkedIn, see the information provided by LinkedIn at https://linkedin.com/secure/developer. Once the IDP Connection has been set up for LinkedIn, you can create a link similar to the one below to allow users to login to EmpowerID using LinkedIn.
|
| Note |
|---|
Be sure to replace "FQDN_OF_YOUR_EMPOWERID_SERVER" with the FQDN of the EmpowerID Web server in your environment and "LinkedIn" with the name of the IDP connection you create for LinkedIn in EmpowerID. |
To configure LinkedIn as an Identity Provider for EmpowerID, you will need to do the following:
Create an OAuth Provider app for LinkedIn in EmpowerID
Adding a Login tile for LinkedIn
Testing the LinkedIn Connection
Create an OAuth Provider app for LinkedIn in EmpowerID
On the navbar, expand Single Sign-On > SSO Connections and click OAuth / OpenID Connect.
Select the External OAuth Services tab and then search for LinkedIn.
Click the Provider link for LinkedIn.
Click the Edit icon for the default LinkedIn provider.
Enter the Consumer Key and Consumer Secret you received from LinkedIn in the Consumer Key and Consumer Secret fields, respectively.
Select the LinkedIn account store from the Select existing Account Directory drop-down field.
Enter the Callback URL for your environment in the Callback Url field. The URL should similar to the below URL where
sso.empoweriam.comis the URL to your EmpowerID server.https://sso.empoweriam.com/WebIdPForms/OAuth/V2Click Save.
Add a Login Tile for LinkedIn
On the navbar, expand Single Sign-On > SSO Connections and click SSO Connections.
Select the IdP Domains tab and then click the IdP Domains link for the IdP Domain where you want the Login tile to appear.
Select the External OAuth Providers tab and then select the LinkedIn provider.
Click Save.
| Note |
|---|
To give users the ability to log in using their EmpowerID credentials, be sure to select EmpowerID from the SAML Identity Providers tab of the IdP Domain Details page. |
Test the LinkedIn OAuth Provider
Log out of the EmpowerID Web interface and navigate your browser to the domain name you configured for the LinkedIn IdP connection.
Click the Login Using LinkedIn tile.
Log in to LinkedIn as you normally would.
Go through the reCAPTCHA test.
Click Allow to authorize EmpowerID to retrieve the necessary information to link the LinkedIn account to your EmpowerID identity (Person object).
You should be authenticated to EmpowerID.
| Div | ||||||||
|---|---|---|---|---|---|---|---|---|
| ||||||||
IN THIS ARTICLE
|
| Insert excerpt | ||||||
|---|---|---|---|---|---|---|
|