OpenID Connect (OIDC) Project

The process of creating an OIDC project in WinCC OA is largely identical to that of a standard project. For detailed instructions on project creation and initial configuration, refer to Standard Project. Server-side authentication (SSA) is configured as described for standard projects.

Password Settings

Important:

The root user cannot be used to log in to an SSA (server-side authentication) project. All other users, such as para, are available for login. For information on predefined users, see Users.

During project creation, you can define users and assign passwords. Use the eye symbol to display a password and the arrow symbol to generate a password automatically.

OIDC-specific Configuration

By default, the OIDC project utilizes the integrated WinCC OA OIDC provider (WinCC OA Internal Identity Provider). A dedicated Control manager is automatically added to the project to start the OIDC provider service.

If you wish to use an external OIDC provider, refer to the OIDC documentation for configuration details.

Note:
The internal OIDC provider will remain as a fallback access, even if a different OIDC provider is configured to always provide a local login option, even if no external provider can be reached.

OIDC enables user authentication within WinCC OA user interfaces via an OIDC provider. During login, the configured OIDC provider is contacted and the authentication dialog is presented in the default web browser. Upon successful authentication, a token is issued and stored on the system.

Authentication for other WinCC OA managers continues to be handled via SSA, as in standard projects. For further information, see Server-side Authentication for Managers.