Lettermint
Single sign-on

Ory

Use this guide when your organization signs in with Ory Network or Ory Hydra. Lettermint connects to an Ory OAuth2/OpenID Connect client.

Before you start

You need access to the Ory project that should own the OAuth2 client. Create a client that supports the authorization code flow and register the Lettermint OIDC callback URL from the SSO guide as a redirect URI.

Ory setup

  1. Open the Ory Console or use the Ory CLI.
  2. Create an OAuth2 client for Lettermint.
  3. Enable the authorization code grant and code response type.
  4. Add the Lettermint OIDC callback URL from the SSO guide as a redirect URI.
  5. Allow the openid, email, and profile scopes.
  6. Copy the client ID and client secret.

Lettermint setup

In the Lettermint SSO setup screen, choose Ory and enter:

FieldValue
DomainYour managed email domain, for example example.com.
Metadata URLhttps://{project}.projects.oryapis.com/.well-known/openid-configuration
Client IDThe Ory OAuth2 client ID.
Client secretThe Ory OAuth2 client secret.

For self-hosted Ory Hydra, use the public issuer URL for your deployment.

References

cidaasSignicat