Integrate IDer with OpenID Connect
IDer is a standard OpenID Connect provider. To add a “Login with IDer” button to Joomla, Drupal, Magento, PrestaShop or a custom application you don’t need a dedicated plugin: a generic OpenID Connect module, configured with your partner account details, is enough.
The sign-in experience stays the IDer one: the customer clicks the button, scans the QR code with the IDer app, chooses which data to share and comes back to your site already signed in. Customers without the app are guided to download it. For WordPress and WooCommerce there is the official IDer Login plugin.
1. Create your partner access2. Values to enter3. Platforms4. Customer data5. Troubleshooting
1. Create your partner access
- Open partner.ider.com and sign in by scanning the QR code with the IDer app. Your company area is created on the first sign-in.
- Go to Login Button and press Edit.
- In Choose site type select Website (also for Drupal and Magento when you use a generic OpenID Connect module).
- In The requested information choose the data you need from the customer and whether each item is required or optional (see step 4).
- Enter your Terms and conditions and Privacy policy: customers see them in the app before giving consent.
- In Set the callback URL enter the redirect address shown by your site’s module (see step 3). It must be identical, character by character, including
https://. - Choose the button style and save. The summary shows Client Id, Client Secret and Scope Name: you need them in the next step. Keep the Client Secret private.
2. Values to enter in the module
They are the same for every platform. If the module supports automatic discovery, the provider address is enough: it reads the other addresses by itself.
| Module field | Value |
|---|---|
| Issuer / Provider URL | https://oid.ider.com/core |
| Discovery / Well-known URL | https://oid.ider.com/core/.well-known/openid-configuration |
| Client ID | The Login Button Client Id |
| Client Secret | The Login Button Client Secret |
| Scope | openid followed, after a space, by the Login Button Scope Name. Example: openid 1a2b3c4d-…. Do not add other scopes such as email or profile: the data you receive depends on what you selected in the portal. |
| Response type / Flow | code (Authorization Code). PKCE with S256 is supported. |
| Client authentication | client_secret_post or client_secret_basic |
| Token signature | RS256 |
If the module asks for each address separately:
| Endpoint | Address |
|---|---|
| Authorization | https://oid.ider.com/core/connect/authorize |
| Token | https://oid.ider.com/core/connect/token |
| Userinfo | https://oid.ider.com/core/connect/userinfo |
| Logout (end session) | https://oid.ider.com/core/connect/endsession |
| JWKS (public keys) | https://oid.ider.com/core/.well-known/jwks |
3. Platforms
Every module shows its redirect address (Redirect URL or Callback URL) in its configuration: copy it into the Set the callback URL field of the partner portal. The examples below show where to find it; the exact value depends on your site.
Drupal 10 and 11
- Install the official OpenID Connect module (
composer require drupal/openid_connect) and enable it. - Go to Configuration → People → OpenID Connect and add a Generic OAuth 2.0 client with a machine name such as
ider. - Enter Client ID, Client Secret, the endpoints from step 2 and the scope.
- Copy the Redirect URL shown by the module (similar to
https://yoursite.com/openid-connect/ider) into the partner portal.
Joomla 4, 5 and 6
- Install an OAuth / OpenID Connect client extension from the Joomla Extensions Directory, for example miniOrange OAuth Client, which has a free plan.
- Create a custom application (Custom OpenID Connect) and enter the values from step 2.
- Copy the Callback URL shown by the extension into the partner portal.
Magento 2 / Adobe Commerce
- Install an OpenID Connect extension for store customers, for example miniOrange OAuth/OIDC SSO from the Commerce Marketplace, or the open-source package
dmlab/module-customer-sso. - Configure a generic OpenID Connect provider with the values from step 2 and map the customer fields (first name, last name, email) as in step 4.
- Copy the extension’s Callback URL into the partner portal.
PrestaShop 1.7, 8 and 9
- Install an OAuth / OpenID Connect client module, for example miniOrange OAuth Client for PrestaShop.
- Add a custom provider with the values from step 2 and set the attribute mapping (required by many modules): email, first name, last name.
- Copy the module’s Callback URL into the partner portal.
Custom applications
Use a certified OpenID Connect library for your language, for example Microsoft.AspNetCore.Authentication.OpenIdConnect (.NET), openid-client (Node.js), Authlib (Python), jumbojett/openid-connect-php or Laravel Socialite with an OpenID Connect provider (PHP). Configure the Authorization Code flow with the discovery address and the scope from step 2.
4. Customer data
After consent, IDer returns the data you selected in the portal. These are the field names (claims) to map to your platform’s customer profile:
| IDer claim | Meaning | Typical platform field |
|---|---|---|
sub | Unique, stable customer identifier | External ID / user identifier |
email | Email (often used to link an existing account) | |
given_name | First name | First name |
family_name | Last name | Last name |
preferred_username | Username | Username |
phone_number | Phone | Phone |
birthdate, gender, nationality | Date of birth, gender, nationality | Profile fields |
address | Address, with street_address, locality, region, postal_code, country | Billing or shipping address |
In the portal you can also request other data, grouped by category: documents (tax code, health card, ID card, passport), residence, shipping and billing addresses, family, job, vehicles (license plate, driving licence, yearly mileage), sizes (shirt, trousers, shoes), open questions and custom fields created by the IDer team. They arrive with their own name, for example license_plate for the plate number.
5. Troubleshooting
| What happens | What to check |
|---|---|
| After the click IDer shows an Error page | The redirect address sent by the module is not identical to the one in the partner portal: check https, the domain with or without www, the trailing slash and the path. Check the Client ID too. |
| Sign-in works but some data is missing (for example the email) | The scope must contain the Login Button Scope Name, and the data must be among those requested in the portal. |
| Token error or “invalid client” | Wrong Client Secret, or a client authentication method other than client_secret_post / client_secret_basic. |
| Token validity error (expired, “not yet valid”) | The site server clock is not synchronised: enable NTP time sync. |
| A new account is created instead of using the existing one | Set the module to link accounts by email, or store the IDer sub on the customer profile. |
| The customer cannot complete the sign-in | They need an up-to-date IDer app and must confirm the request in the app. |
Beyond the button: campaigns
From the partner portal you can also create campaigns to acquire new customers: a digital QR code or button for social media, newsletters and your website, or a printable QR code for flyers, newspapers, TV or your shop window. Whoever scans it with the IDer app shares the data you chose and lands on your site or on a page created by IDer for the campaign.
Need help? Write to us through the contact form.