Our cloud team need the following information to provide the Rubin team a OIDC Redirect URI. :
client_id = “oidc-client-id”
client_secret = “oidc-client-secret”
oidc_issuer = “https://idp.example.com”
authorize_scopes = “e.g. openid email profile”
I think DMTN-253 should provide the necessary background including the scopes to use. The client ID and secret will be provided once your request is approved. The OIDC issuer information can be found in the OpenID Connect metadata published by data.lsst.cloud:
Yes, indeed, you should make the request here in this topic. We need the information listed in DMTN-253, and then I’ll create the client and send you the information when the configuration is updated. We do that during Thursday maintenance windows.