OIDC Setup

Use these steps to set up OIDC authentication.

Prior to using MyPlan OIDC, ensure the following:

• Maconomy generic third-party SSO is set up in Maconomy using MConfig, and it is verified that it works.

  See the Deltek Maconomy System Admin Guide for more information.

• Maconomy RESTful Web Service is enabled and runs on the Maconomy system.
• People Planner is configured to integrate with Maconomy and import users from Maconomy.
  Note: The users in Maconomy must have the Network Username and the Network Domain name set.
• Maconomy RESTful URL and the (SSI) Maconomy Secret Key are configured in the Web Admin Tool.

To use MyPlan OIDC, set up the following:

1. Add the MyPlan OIDC login page URI to the identity provider configuration as an allowed login redirect URI. The URI has the general form: <scheme>://<server>:<port>/MyPlan/OIDCLogin.aspx.

   For example:

   https://peopleplanner.mycompany.com/MyPlan/OIDCLogin.aspx

2. Enable the MyPlan OIDC authentication in People Planner settings using the Web Admin Tool.
3. Change the authentication setting for the IIS MyPlan web application from Windows Authentication to Anonymous Authentication.
   Note: When using MyPlan OIDC with other People Planner Authentication schemes:

   • You are able to use MyPlan OIDC authentication with typical People Planner SSI or JWT token authentication.
   • You are unable to use MyPlan OIDC authentication with Azure AD. If Azure AD authentication is enabled for MyPlan, it takes precedence over the OIDC authentication protocol.