== Login ==
* Install the Auth Processor plugin (SAMLProcessor or OIDCProcessor plugin) in your web service's injection folder
* Customize your UBIK Context, overriding the method "GetSSOProcessor" so it returns an instance of the authentication processor: '''OIDC:'''
=== Applying an SSO Processor ===
==== OIDC ====
{{Version/ServerSince|4.6.0}}In the case of a periodic rolling of the signing key, use the DynamicOIDCProcessor which fetches the JWKS automatically via the base URL of the chosen OIDC Provider:
<syntaxhighlight lang="csharp">
You will need to insert the correct jwks from your OIDC Provider instead of "...".
'''==== SAML:'''====
<syntaxhighlight lang="csharp">
public override UBIK.Kernel.SSO.ISSOProcessor GetSSOProcessor(System.String token)
</syntaxhighlight>
You will need to load the correct certificate from your SAML Identity Provider instead of null. It's recommended to save the certificate on the server and load it from file storage. The certificate must be the one the IdP uses to sign its SAML responses with.
[[Category:How-To|Integrate UBIK in an SSO Environment]]
[[Category:SSO|Integrate UBIK in an SSO Environment]]
[[Category:Version 3.6|Integrate UBIK in an SSO Environment]]
== Customizing the SSO processor ==