Skip to main content

RVL OneID Third-Party Client Integration Guide

Welcome to the RVL OneID Integration Guide. This documentation provides comprehensive instructions for integrating third-party applications with the OneID identity provider using OAuth 2.1 and OpenID Connect with PKCE (Proof Key for Code Exchange).

Overview​

OneID is a secure identity provider that enables Single Sign-On (SSO) capabilities for third-party applications. This integration guide covers the complete authentication flow, from initial setup to user logout.

What You'll Learn​

  • How to configure your application with OneID
  • Implementing OAuth 2.1 with PKCE flow
  • Handling user authentication and authorization
  • Fetching user information securely
  • Best practices for security
  • User registration redirection

Environments​

OneID provides multiple environments for development and testing:

  • Development: OIDC URLs for development environment
  • Test: OIDC URLs for testing environment

Getting Started​

Before you begin, ensure you have:

  • A registered application with OneID
  • Your client credentials
  • Development environment set up
  • Basic understanding of OAuth 2.1 and OpenID Connect

Let's start with the Prerequisites to get your application configured properly.

Architecture Overview​

The integration follows the Authorization Code Flow with PKCE, which provides enhanced security for public clients:

  1. Generate PKCE Parameters: Create code verifier and challenge
  2. Authorization Request: Redirect user to OneID login
  3. Handle Callback: Process authorization code
  4. Token Exchange: Exchange code for access tokens
  5. Fetch User Info: Retrieve user profile data

This flow ensures secure authentication while maintaining a smooth user experience.