This guide explains how your company can connect its own Identity Provider (IdP) to Cofinity-X for Single Sign-On using OIDC (OpenID Connect).
In the Cofinity-X Portal, you can add your company IdP under Technical Setup > Identity Provider Configuration by selecting Add Identity Provider. During this setup, you will need to provide your Metadata URL, Client ID, and Client Secret. You must also register the redirect URL generated by the portal in your IdP configuration.
Configure your Identity Provider in the Cofinity-X Portal
Go to:
Technical Setup → Identity Provider Configuration → Add Identity Provider
Select the following options:
Authentication Type: OIDC
Identity Provider Type: Own
After Creating the IDP entry, you need to configure the connection details to your company IdP.
Information you must provide
You need your own OpenID Connect-compatible IdP, for example Azure, Keycloak, or another OIDC provider, together with the following values:
Metadata URL ending in
/.well-known/openid-configurationClient ID
Client Secret
Redirect URL generated by the Cofinity-X portal
The redirect URL must be registered in your IdP exactly as provided. Wildcards are not supported.
Notes on common IdP terminology
In Azure, the Application ID is your Client ID
In Keycloak and similar systems, this value is usually called Client ID
After entering the required information, save the configuration and proceed to the next step.
To activate your IdP, you must connect your existing Catena-X user account with your user ID from the newly added IdP.
Depending on your setup, this user ID may be:
your Provider ID if you are using Azure
your email address for other IdPs
You can find the steps for retrieving your Provider ID further below in this guide.
Additional Helpful Resources
Configuring Azure as an example to retrieve necessary details.
Create New Enterprise Application.
Log in to your Microsoft Azure account.
Navigate to Enterprise Applications.
Create New Application
Register the Application.
From the Homepage, navigate to App Registrations.
Register your Application
In your application, navigate to ‘Overview’. The application ID is your Client ID needed in the above step of configuring the connection details to your company IdP
In your application, navigate to ‘Manage’ >> ‘Certificates & Secrets’ and create a new secret. This will be your Client Secret in the above step of configuring the connection details to your company IdP.
In your application, navigate to ‘Overview’. Locate the Endpoints option and you will find a list of endpoints. Your Metadata URL is the endpoint that ends in ‘/.well-known/openid-configuration’
Register the redirect URL in your Open ID instance
Copy and paste the redirect URL from Portal in the Authentication
Retrieving the Provider ID from Cofinity-X:
Here are the steps you can follow to retrieve your Provider ID:
First, if you haven't already, create a managed IDP in the Cofinity-X Portal.
Logout from your company and log in to the newly created managed IDP in the Cofinity-X Portal.
Upon logging in, you may be prompted to log in to Azure. After successful login, you'll see a screen that displays the username, which you can use as the "ProviderId" in the invitation payload.
For any questions, feel free to reach out to [email protected].