Updating an OIDC application in Yandex Identity Hub

Log in to Yandex Identity Hub.

In the left-hand panel, select Apps and select the OIDC application.

On the top right, click Edit and in the window that opens:

1. Change the app's name in the Name field. The name must be unique within the organization and follow the naming requirements:

   • It must be from 1 to 63 characters long.
   • It may contain lowercase Latin letters, numbers, and hyphens.
   • It must start with a letter and cannot end with a hyphen.

2. Change the app's description in the Description field.

3. Add new labels by clicking Labels in the Add label field. Click to delete an existing label.

4. Click Save.

On the top right, click Edit and in the window that opens:

1. Specify the address you got from the service provider in the Redirect URI field.

   Click Add URI to specify multiple redirect URIs at once.

2. In the Scopes field, select user attributes that will be available to the service provider.

   • openid (user ID): User ID. This is a required parameter.

   • email address: User email address.

   • profile (full name, first name, last name, avatar, etc.): Additional user details.

   • groups (user's groups in the organization): User groups in the organization whose member the user getting authenticated is. The possible values are:

     • All grous : Security provider will get all groups the user belongs to.

       The maximum number of sent groups: 1,000. If the user belongs to more groups, only the first thousand of them will be communicated to the service provider.

     • Assigned groups only: Of all groups the user belongs to, the service provider will only get the ones explicitly specified on the Users and groups tab of the OIDC app.

3. Click Save.

Under App secrets, click Add secret, and in the window that opens:

1. Optionally, add a description for the new secret.
2. Click Create.

The window will display the generated application secret. Save this value.

If you closed or refreshed the page before saving the secret, click Add secret to create a new one.

To delete a secret, in the list of secrets on the OIDC app page, click in the secret row and select Delete.

Log in to Yandex Identity Hub.

In the left-hand panel, select Apps and then, the OIDC app.

Navigate to the Users and groups tab.

To add a user or user group to the app:

1. Click Add users.
2. In the window that opens, select the required user or user group.
3. Click Add.

To delete a user or user group from the app:

1. In the list of users and groups, click and select Delete next to the user or user group.
2. Confirm the deletion.