Connect to the SQL Diagnostic Manager Repository with the OIDC Authentication Method.
Prerequisites
- Have Okta or Entra ID OIDC provider credentials.
- The OIDC callback URL should be configured as http://localhost:5000/callback/
- In Okta, configure Allowed Callback URLs as http://localhost:5000/callback/
- In Entra ID, configure Redirect URLs as http://localhost:5000/callback/
Setting the OIDC callback URL for SQL DM Desktop
The OIDC callback URL for the Desktop Client is stored in the user.config file. Although it defaults to http://localhost:5000/callback/, the user can change it to any localhost URL, provided the same URL is included in the list of Allowed Callback URLs. Changes take effect after relaunching the application, which is helpful if port 5000 is already in use on a particular machine.
Setting the OIDC callback URL for SQL DM Web Console
Configure the OIDC callback URL for SQLDM Web Console as https://[machine_name]:9295/callback/. The base of the callback URL must be the same as it was shown in the Web Console during the last step of the installer (but https).
Set your OIDC credentials
Use the OIDC Settings window to specify the OIDC credentials for when you want to enable OIDC authentication. Once specified, the credentials take effect for all Desktop Clients and Web Consoles connecting to the same SQL DM Repository.
To set your OIDC credentials
- Access the OIDC Settings window by selecting
> OIDC Settings from the SQL Diagnostic Manager toolbar. - Assign the OpenID Connect Provider. It can be a nickname for your Okta or Entra ID.
- Insert the Authority URL provided by the OIDC provider. It is the endpoint where the authentication process starts, typically in the format of https://login.provider.com/....
- Insert your Client ID (unique identifier) for the application registered with the OIDC provider.
- Insert your Client secret credential from the provider.
- Click Login to initiate the OIDC log in.
- A web browser appears where you have to authenticate against the OIDC provider.
- On valid authentication, a success message appears.
- If the authentication fails, an unsuccessful message appears.
- The Authentication status label displays in the wizard whether the user is Authenticated or Not Authenticated.
- A web browser appears where you have to authenticate against the OIDC provider.
- Click Logout to log out from the current OIDC session. It clears any stored tokens or session data.You can log out whenever you want from the same wizard.
- Click OK to save your changes in the Repository and Management Service Settings wizard.
- If the token expires, the next time you login, a new token is generated automatically.
- If the authorized session is revoked by the provider, the Authentication Failed message appears, requiring you to authenticate again.
For more information, visit Okta or Entra ID.