It seems like such a basic question that I'd rather not ask, however I've been searching everywhere and was unable to get this working. I've installed Gluu and Nextcloud with the Social login plugin on another server. I'm trying to authenticate my nextcloud installation with my Gluu instance. Unfortunately I'm very new to Gluu and SSO in particular but I want to learn. The NC addon is asking me for the following: ``` Authorize url Token url User info URL Client Id Client Secret Scope ``` After searching the docs I came to the following which, unfortunately, seems wrong. ``` Authorize url: https://idp.hostname/oxauth/restv1/authorize Token url: https://idp.hostname/oxauth/restv1/token User info URL: blank Client Id: Generated by Gluu Client Secret: Generated by Gluu Scope: email ``` As I want my users to login with their email address I've set "scope" to email. This might, however, be the wrong method of achieving this. In Gluu under OpenID Connect > Clients I created a new client with the following config: ``` OPENID CONNECT CLIENTS DETAILS ------------------------------ - **Name:** Nextcloud - **Description:** Nextcloud - **Client ID:** XXXXXXXXXXX - **Subject Type:** public - **Expirattion date:** Sat May 06 00:00:00 UTC 2119 - **ClientSecret:** XXXXXXXXXXX - **Application Type:** web - **Persist Client Authorizations:** true - **Pre-Authorization:** true - **Authentication method for the Token Endpoint:** client_secret_basic - **Logout Session Required:** false - **Include Claims In Id Token:** false - **Disabled:** false - **Login Redirect URIs:** [https://nextcloudserver/index.php/apps/sociallogin/custom_oidc/Gluu] - **Scopes:** [email, openid, profile] - **Grant types:** [authorization_code] - **Response types:** [code] ``` When trying to login to NC with the Social Login feature I'm presented with the following error: ``` {"error":"invalid_request_redirect_uri","error_description":"The redirect_uri in the Authorization Request does not match any of the Client's pre-registered redirect_uris.","state":"HA-S2TR5WI8VA9X0DGPUE643YMF1OJBZHCQNKL7"} ``` Anyone here that can help me out with the correct "Authorize" and "Token" URL, and anything else that might be wrong with this configuration? I'm also wondering how I would define a users role/permission within Gluu in order to have effect on, for example, NC. Thanks in advance for any guidance in, what must be, an easy matter.