If you wish to federate your identity provider (IdP) with the Medtronic Customer Identity and Access Management (CIAM) broker using OIDC core 1.0, please follow these instructions.
To federate using SAML 2.0, see the SAML page instead.
Register your IdP in Touch Surgery™
If you already have a federation configured and tested in your non-production environment, click Set up in Production and skip to step 5.
In Touch Surgery™:
Go to your Account Settings.
Select SSO setup.
Select Add a connection.
Choose OIDC from the dropdown menu.
Copy the redirect URL.
Prepare the OIDC application in your IdP
In your IdP:
1. Create an OIDC application.
2. Set a redirect URL. This is the URL you copied from the previous section.
3. Create your client credentials.
4. Generate or get your client ID. Copy it for later use.
5. Generate a client secret. Copy it for later use.
6. Configure tokens and optional claims.
Ensure that email is configured as a claim.
Ensure that first name and last name are available. (Typically as part of the user profile.)
7. Ensure the application has permissions to read user data.
8. Add users to the application.
Complete registration in Touch Surgery™
In Touch Surgery™:
1. Return to the page displaying the OIDC registration form.
2. Enter the following client details into the form.
Client ID – the client ID you generated in your IdP.
Client secret – the client secret you generated in your IdP.
Scopes – scopes required to get profile information. (Typically email, openID, and profile)
3. Enter the following endpoints into the form, as provided by your IdP.
Issuer
Authorization URL
Token URL
JWKS signing key URL
User info
4. Submit the form. Our team requires up to 2 business days to create your federation in the Medtronic CIAM broker.
While you wait, you may continue with verifying your domains.
Next steps
Verify your domains, if not complete already