The EmpowerID SSO framework allows you to configure Yahoo as an identity provider (IdP) for EmpowerID. EmpowerID integrates with Yahoo using OAuth 2.0.

Prerequisites:

Before configuring Yahoo as an OAuth Identity Provider in EmpowerID, you need to meet the following conditions:

You must have a Yahoo account
Create an application for EmpowerID in Yahoo

Once you have completed setting up an SSO connection for Yahoo, you can create a link similar to the one below to allow users to login to EmpowerID using Yahoo.

https://FQDN_OF_YOUR_EMPOWERID_SERVER/WebIdPForms/Login/Portal/Yahoo?returnUrl=%2FWebIdPForms%2F

Be sure to replace FQDN_OF_YOUR_EMPOWERID_SERVER with the FQDN of your EmpowerID server.

Steps

To configure Yahoo as an Identity Provider for EmpowerID, you need to do the following:

Create an application for EmpowerID in Yahoo
Configure the default Yahoo OAuth Provider app
Add a Login button to the Login page for Yahoo
Test the OAuth provider app

Create an application for EmpowerID in Yahoo

To allow users to authenticate to EmpowerID using their Yahoo credentials, you must register EmpowerID as an OAuth application in the Yahoo Developer Network. See Yahoo’s article at https://developer.yahoo.com/oauth2/guide/openid_connect/getting_started.html for directions on how to do this. During the app creation process, Yahoo will generate a Client ID and Client Secret for the application. You will use these when you create an OAuth Provider App for Yahoo in EmpowerID.

When creating an application for EmpowerID in Yahoo, set the following:

Setting	Value

Setting	Value
Application Name	Name of the application you are creating. This can be any value.
Application Type	Web Application
Redirect URI(s)	`https://YOUR_EMPOWERID_SERVER/WebIdPForms/oauth/v2`
API Permissions	OpenID Connect Permissions

Configure the default Yahoo OAuth Provider app

On the navbar, expand Single Sign-On > SSO Connections and click OAuth / OpenID Connect.
Select the External OAuth Services tab and then search for LinkedIn.
Click the Provider link for Yahoo.
Click the Edit button for the default Yahoo OAuth provider app.
Under General Settings, fill in the following information and then click Save.

Field	Description

Field	Description
Consumer Key	Client ID generated by Yahoo for the app
Consumer Secret	Client Secret generated by Yahoo for the app
Is Identity Provider	Select this option to flag the OAuth provider as an Identity Provider app.
Select existing Account Directory	Select Yahoo to place authenticated users in the selected account store.
Callback Url	This is the URI that Yahoo redirects users after they have authenticated with Yahoo. The URL should look like the following: `https://YOUR_EMPOWERID_SERVER/WebIdPForms/oauth/v2`, where YOUR_EMPOWERID_SERVER is the FQN of your EmpowerID Web server.

Add a Login Button for Yahoo

On the navbar, expand Single Sign-On > SSO Connections and click SSO Connections.
Select the IdP Domains tab and then click the IdP Domains link for the IdP Domain where you want the Login tile to appear.
Select the External OAuth Providers tab and then select the Yahoo provider.
Click Save.

To give users the ability to log in using their EmpowerID credentials, be sure to select EmpowerID from the SAML Identity Providers tab of the IdP Domain Details page.

Test the OAuth Provider App

Log out of the EmpowerID Web interface and navigate your browser to the domain name you configured for the Yahoo IdP connection.
Click the Login Using Yahoo button.
Log in to Yahoo as you normally would.
Click Allow to authorize EmpowerID to retrieve the necessary information to link the LinkedIn account to your EmpowerID identity (Person object).

You should be authenticated to EmpowerID.

IN THIS ARTICLE