# Bluemind

## Presentation

Bluemind is a groupware application that can use both the

OpenID Connect or CAS protocols.

It is recommended to use the more secure OpenID Connect protocol.

## Configuration

### LL:NG

Make sure you have already enabled OpenID Connect on your LemonLDAP::NG server.

Make sure you have generated a set of signing keys in `OpenID Connect Service` » `Security` » `Keys`

You also need to set a Signing key ID to a non-empty value of your choice.

Then, add a Relying Party with the following configuration:

- Options » Basic » Client ID : choose a client ID, such as `my_client_id`

- Options » Basic » Client Secret : choose a client secret, such as `my_client_secret`

- Options » Basic » Allowed redirection address : `https://bluemind.example.com/auth/openid`

- Options » Advanced » Force claims to be returned in ID Token : `On`

- Options » Advanced » Use JWT format for Access Token: `On`

- Options » Advanced » Release claims in Access Token: `On`

- Options » Algorithms » ID Token Signature Algorithm : `RS256`

- Options » Scope » Scope rules » email : `1`

Define exported attributes:

- `email`: The name of the LLNG variable containing the e-mail address, usually `mail`.

### Bluemind

Refer to the Bluemind documentation to configure your Bluemind server.

- third-party OpenID server URL: `https://auth.example.com/.well-known/openid-configuration`

- OpenId customer identifier: `my_client_id` from LemonLDAP configuration

- OpenId customer secret: `my_client_secret` from LemonLDAP configuration