Configuring a user registry

In this topic you can find information about how to configure a user registry.

About this task

By default, the UI is configured to use a local file-based user repository. For information about supported authentication mechanisms in WebSphere Application Server Liberty see the section about authenticating users in WebSphere Application Server Liberty documentation.

You can implement an OpenID Connect (OIDC) user registry by configuring the sample authentication template provided in XML format. You can further customize the template by adding additional elements to the XML files. For a full list of the elements that you can configure to complement or modify the configuration, see the related WebSphere Application Server Liberty documentation.

Configuring an OIDC user registry

About this task

You can enable an OIDC user registry by configuring the values.yaml deployment file as follows:
 uno.authentication.oidc.enabled=true
Set the required parameters into the uno.authentication.oidc section of the values.yaml file, according to your OIDC provider.
If the OIDC you are using has custom certificates, to connect your machine to your OIDC provider you must use the certificate as secret in the following parameter of under certificates section:
 uno.config.certificates.additionalCASecrets : Specify the secret.