Zitadel

Log in to Zitadel's web interface.

Create a project.

Add a new application within the project.

Select Web for applicatiom type.

Choose Code for authorization method.

Enter redirect URI for your Defguard instance. The URI is in the form <DEFGUARD_DASHBOARD_URL>/auth/callback, for example https://defguard.example.com/auth/callback. (If Defguard has been launched on the localhost, select Development Mode and enter http://localhost:8000/auth/callback). If you'd like to use OpenID enrollment through proxy, make sure to enter an additional URI here in the form of <DEFGUARD_ENROLLMENT_URL>/openid/callback.

Create the application.

Copy the provided Client ID and Client Secret and enter these in the Defguard's OpenID settings.

Finally, in the Token Settings, enable User Infor inside ID Token.