SAP CDC Hosted Page OIDC - no consent page

[jctapnio]

Hi All,

I am trying to make an OIDC login using Hosted Page. I am getting an error like in the image below. I know that the consent should be encrypted and then I created a consent page.

Now my question is, how to let the gigya.oidc.js SDK know the consent page to automatically redirect the page if consent is needed?

In localhost all I need to do is this code. How to do it in Hosted Page?

<script
      type="text/javascript"
      lang="javascript"
      src="https://cdns.gigya.com/JS/gigya.oidc.js?apiKey=<API_KEY>"
    >
      {
          loginURL: "http://localhost:3000/login",
          consentURL: "http://localhost:3000/consent",
          errorURL: "http://localhost:3000/error"
      }
</script>

<script type="text/javascript" lang="javascript" src="https://cdns.gigya.com/JS/gigya.oidc.js?apiKey=<API_KEY>" > { loginURL: "http://localhost:3000/login", consentURL: "http://localhost:3000/consent", errorURL: "http://localhost:3000/error" } </script> <script type="text/javascript" lang="javascript" src="https://cdns.gigya.com/JS/gigya.oidc.js?apiKey=<API_KEY>" > { loginURL: "http://localhost:3000/login", consentURL: "http://localhost:3000/consent", errorURL: "http://localhost:3000/error" } </script>

And another question is, how to import a library in the screenset of the consent page to create the consent signature?

[iandotha · Accepted solution]

When using OIDC with Hosted Pages in CDC, the RP must be configured to skip consent.
There is no consent page handling in hosted pages, as consent for sharing data is collected during the registration process.

[jctapnio · Accepted solution]

Ok thank you! This worked for me.

[jctapnio · Accepted solution]

Hi Ian,

Follow up question for this.

I have 2 RPs connected to OIDC.

How to redirect them to their own page when they login in the hosted page?

Currently the screenset is configured in the javascript parameter to redirect to a single page.

[iandotha]

Hi Jonathan,

The page displayed when the RP calls the OP's /authorize endpoint is defined in the OP configuration.

Only in the case where you need to override that page for a given RP(s), you can configure that in the RP, in the 'proxy page override' section.