# Generic OpenID Connect provider

Steps not yet verified in the identity provider's current admin console.

## OpenID Connect

### Connect any OpenID Connect provider

1. In the provider register a confidential web client with redirect URI **redirect URI** and the authorization code flow.
2. If the provider supports private\_key\_jwt register the KeenAuth keys from **KeenAuth key set URL**; otherwise use a client secret.
3. Note the issuer exactly as the provider publishes it; its discovery document is at the issuer plus /.well-known/openid-configuration.
4. Enter issuer, client ID and credential in KeenAuth, map the claims, run the connection test and activate the connection.

Values in bold are shown on the connection's page in the Admin Portal, where this guide has them filled in.