Discuss with expertTry it for free
© 2026 Direct Cursus Technology L.L.C.

Creating an OIDC app in Yandex Identity Hub for integration with Loop

Written by
Updated at September 1, 2026
View in Markdown

Loop is a corporate messenger with single sign-on support based on the OpenID Connect (OIDC) standard.

For your organization's users to be able to authenticate to Loop via OpenID Connect SSO, create an OIDC app in Yandex Identity Hub and configure it both in Yandex Identity Hub and Loop.

OIDC apps can be managed by users with the organization-manager.oauthApplications.admin role or higher.

To provide your organization's users with to Loop:

  1. Create an app.
  2. Set up the integration.
  3. Add users.
  4. Make sure the application works correctly.

Create an app

  1. Log in to Yandex Identity Hub.
  2. In the left-hand panel, select  Apps.
  3. In the top-right corner, click Create application and in the window that opens:
    1. Select the OIDC (OpenID Connect) single sign-on method.

    2. In the Application type field, select Web Application.

      OIDC apps of the Web Application type are optimized for user authentication to external web apps with a server end (backend), where the application secret can be safely stored. For more information about OIDC application types, see Types of OIDC apps in Yandex Identity Hub.

    3. In the Name field, specify a name for your new app: loop-oidc-app.
    4. In the Folder field, select the folder where you want to create an OAuth client for your app.
    5. Optionally, add a description and labels for the app.
    6. Click Create application.

Set up the integration

To configure Loop integration with the OIDC app you created in Yandex Identity Hub, complete the configuration both on the Yandex Identity Hub side and in Loop.

Get the application's credentials and create the application's secret

  1. Log in to Yandex Identity Hub.
  2. In the left-hand panel, click Apps and select the loop-oidc-app app.
  3. On the Overview tab, under Identity provider (IdP) configuration, copy the ClientID setting value.

  4. Create an app secret (only available for applications of the Web Application type):

    1. Under App secrets, click Add secret, and in the window that opens:

      1. Optionally, add a description for the new secret.
      2. Click Create.

    The window will display the generated application secret. Save this value.

    Warning

    If you refresh or close the application information page, you will not be able to view the secret again.

    If you closed or refreshed the page before saving the secret, click Add secret to create a new one.

    To delete a secret, in the list of secrets on the OIDC app page, click in the secret row and select Delete.

Set up OIDC authentication in Loop

  1. Log in to the Loop system console at https://<instance_name>.loop.ru/admin_console/authentication/openid, where <instance_name> is the name of your Loop instance.
  2. Under Authentication:
    1. Select OpenID Connect.
    2. Under Select provider, select OpenID connection (Other).
    3. Optionally, in the Button name field, enter the text that will appear on the login button on the login page, e.g., Via OIDC.
    4. Optionally, select the color of the login page button.
    5. In the Issuer link field, enter the OpenID Connect provider's address: https://auth.yandex.cloud.
    6. Set the Client ID field, enter the ClientID you copied from Yandex Identity Hub.
    7. In the Client key field, specify the application secret generated in Yandex Identity Hub.
  3. Save the settings.

Configure a redirect URI in Yandex Identity Hub

  1. Log in to Yandex Identity Hub.
  2. In the left-hand panel, click Apps and select the loop-oidc-app app.
  3. At the top right, click Edit and in the window that opens:
    1. In the Redirect URI field, specify the callback address: https://<instance_name>.loop.ru/signup/openid/complete, where <instance_name> is the name of the Loop instance (subdomain at loop.ru).

    2. Under OAuth/OIDC security, disable the Require PKCE option so that Yandex Identity Hub does not require the external application to use the PKCE security extension when exchanging data.

      PKCE is a security extension used in OAuth 2.0 to minimize the risk of authentication data interception. For more information, see PKCE.

    3. Click Save.

Add users

To authenticate with Loop, add the required users and/or user groups to your Yandex Identity Hub OIDC application.

Note

Users and groups added to an OIDC application can be managed by any user with the organization-manager.oidcApplications.userAdmin role or higher.

To add users to a SAML application:

  1. Log in to Yandex Identity Hub.
  2. In the left-hand panel, click Apps and select the loop-oidc-app app.
  3. Navigate to the Users and groups tab.
  4. Click Add users.
  5. In the window that opens, select the required users.
  6. Click Add.

Tip

If you want to fine-tune user authentication in your applications, including authentication only from specific IP addresses, use authentication policies.

Authentication policies are a Yandex Identity Hub tool that allows you to flexibly configure access to applications by denying or allowing authentication for specific users in specific applications and/or from specific IP addresses. For more information, see Authentication policies in Yandex Identity Hub.

Make sure your application works correctly

To ensure that your OIDC application and integration with Loop are working correctly, log in to Loop as one of the added users. Proceed as follows:

  1. In your browser, open the login page of your Loop instance: https://<instance_name>.loop.ru.
  2. Select login via OpenID Connect.
  3. Authenticate in Yandex Cloud under a user account from your organization.
  4. Make sure you have signed in to Loop following a successful authentication.
Previous
SAML
Next
Managed Service for GitLab