> ## Documentation Index
> Fetch the complete documentation index at: https://formbricks.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Open ID Connect

> Configure Open ID Connect for secure Single Sign-On with your Formbricks instance. Implement enterprise-grade authentication for your survey platform with Open ID Connect.

> [!NOTE]
>
> OpenID Connect is part of the Formbricks [Enterprise Edition](https://formbricks.com/docs/self-hosting/advanced/license.md)

Integrating your own OIDC (OpenID Connect) instance with your Formbricks instance allows users to log in using their OIDC credentials, ensuring a secure and streamlined user experience. Please follow the steps below to set up OIDC for your Formbricks instance.

* Configure your OIDC provider & get the following variables:

* `OIDC_CLIENT_ID`

* `OIDC_CLIENT_SECRET`

* `OIDC_ISSUER`

* `OIDC_SIGNING_ALGORITHM`

> [!NOTE]
>
> Make sure the Redirect URI for your OIDC Client is set to
> `{WEBAPP_URL}/api/auth/oauth2/callback/openid`.

> [!NOTE]
>
> **Using Microsoft Entra ID?** Configure it through the dedicated [Azure AD
> provider](https://formbricks.com/docs/self-hosting/configuration/auth-sso/azure-ad-oauth.md) rather than here — it maps Entra's
> profile correctly. If you do point `OIDC_ISSUER` at a multi-tenant authority
> (`login.microsoftonline.com/common` or `/organizations`), Formbricks skips OpenID discovery for it
> and logs a warning at startup: those authorities advertise a placeholder issuer instead of a real
> one, so id\_tokens cannot be verified against it and sign-in would otherwise fail.

> [!NOTE]
>
> **Using Okta or Keycloak?** Both have step-by-step guides:
> [Okta OIDC](https://formbricks.com/docs/self-hosting/configuration/auth-sso/okta-oidc.md) and
> [Keycloak OIDC](https://formbricks.com/docs/self-hosting/configuration/auth-sso/keycloak-oidc.md).

> [!WARNING]
>
> **Upgrading from v5.1 or earlier?** This path changed once, at v5.2:
>
> * v5.1 and earlier: `{WEBAPP_URL}/api/auth/callback/openid`
> * v5.2 and later (current): `{WEBAPP_URL}/api/auth/oauth2/callback/openid`
>
> Upgrading from v5.2 or later needs no change — the callback URL is pinned and does not move with
> Formbricks' authentication library. See the [migration guide](https://formbricks.com/docs/self-hosting/advanced/migration.md).

* Update these environment variables in your `docker-compose.yml` or pass it directly to the running container.

An example configuration for a FusionAuth OpenID Connect in Formbricks would look like:

```yml Formbricks Env for FusionAuth OIDC theme={null}
OIDC_CLIENT_ID=59cada54-56d4-4aa8-a5e7-5823bbe0e5b7
OIDC_CLIENT_SECRET=4f4dwP0ZoOAqMW8fM9290A7uIS3E8Xg29xe1umhlB_s
OIDC_ISSUER=http://localhost:9011 
OIDC_DISPLAY_NAME=FusionAuth
OIDC_SIGNING_ALGORITHM=HS256
```

* Set an environment variable `OIDC_DISPLAY_NAME` to the display name of your OIDC provider.

* Restart your Formbricks instance.

* You're all set! Users can now sign up & log in using their OIDC credentials.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.