Configuration

To enable OIDC-based authentication in Cryptshare, configuration steps are required on both the Identity Provider (IdP) and the Cryptshare Server.

Identity Provider configuration

On the Identity Provider side, the access scopes that map to Cryptshare administration levels must be defined. Depending on the Identity Provider, this can be implemented as roles in Keycloak or as app roles in Microsoft Entra ID.

Cryptshare uses the role information provided by the Identity Provider to determine the administrator’s permissions after login. See Groups and roles.

  1. In Cryptshare, verify the Administration Base URL under Administration Interface > System Settings > Connection.

  2. In the Identity Provider, configure the OIDC client redirect URL so that it matches that Administration Base URL.

Cryptshare Server configuration

  1. Add the following configuration parameters to the cryptshare.properties file located in the installation directory of your Cryptshare Server:

idProvider.baseUrl=<idPUrl>
idProvider.realm=<usedRealm>
idProvider.clientId=<usedClientId>
Restart the Cryptshare service after changing the OIDC configuration.
If you need assistance in configuring Pointsharp Identity Provider for Cryptshare, please contact our support team.