# Open ID Connect for Web Application (Apache Server)

**URL:** <https://devforum.okta.com/t/open-id-connect-for-web-application-apache-server/23263>\
**Category:** OAuth/OIDC\
**Created:** [February 6, 2023, 8:51am UTC](https://devforum.okta.com/t/open-id-connect-for-web-application-apache-server/23263 "2023-02-06T08:51:10Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hanumesh](https://avatars.discourse-cdn.com/v4/letter/h/dbc845/32.png) [@Hanumesh](https://devforum.okta.com/u/Hanumesh)\
**Post date:** [February 6, 2023, 8:51am UTC](https://devforum.okta.com/t/open-id-connect-for-web-application-apache-server/23263/1 "2023-02-06T08:51:10Z")

</div>

Hi There,  
Greetings!

My application is a Web Based and uses Apache Server, currently we are migrating to Open ID Connect.

I request can anyone help me out to onboard OIDC using Shell Script.

Thanks in advance.  
Hanumesh

---

<div class="post-metadata">

**Author:** ![adam\_okta](https://avatars.discourse-cdn.com/v4/letter/a/f6c823/32.png) [@adam\_okta](https://devforum.okta.com/u/adam_okta)\
**Post date:** [March 2, 2023, 9:09am UTC](https://devforum.okta.com/t/open-id-connect-for-web-application-apache-server/23263/2 "2023-03-02T09:09:41Z")

</div>

If you are using [mod\_auth\_openidc](https://github.com/zmartzone/mod_auth_openidc/) and Ubunutu, you can do something like this:

```auto
#!/bin/bash

# Install Apache OIDC module
sudo apt-get update
sudo apt-get install libapache2-mod-auth-openidc

# Create OIDC configuration file
cat <<EOF > /etc/apache2/mods-available/auth_openidc.conf
OIDCProviderMetadataURL https://your-okta-domain.com/oauth2/default/.well-known/oauth-authorization-server
OIDCClientID {yourClientId}
OIDCClientSecret 'YOUR_CLIENT_SECRET'

OIDCScope "openid name email"
OIDCRedirectURI https://your_apache_server/your_path/redirect_uri/
OIDCCryptoPassphrase <passwordToEncryptTheSessionInformationOnTheCookie>

<Location /protected>
   AuthType openid-connect
   Require valid-user
</Location>
EOF

# Enable the Module
sudo a2enmod auth_openidc

# Restart Apache service
sudo systemctl restart apache2.service

```

The above example is based on a [quickstart in the Auth0 docs](https://auth0.com/docs/quickstart/webapp/apache/01-login), however [mod\_auth\_openidc](https://github.com/zmartzone/mod_auth_openidc/) should work with any OIDC provider.

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [February 13, 2024, 6:59pm UTC](https://devforum.okta.com/t/open-id-connect-for-web-application-apache-server/23263/3 "2024-02-13T18:59:11Z")

</div>

Closed on February 13, 2024, 6:59pm UTC