LINE external IDP

The LINE Login social connection allows users to log in to your application using their LINE profile.

Prerequisites

• Sign up for a LINE account.

• Register your LINE account as a developer. Log in to the LINE Developer console. If it's your first time logging in, you'll automatically be asked to register as a developer and link your account.

Set up a provider at LINE

1. Log in with your LINE developer account.

2. On the Providers screen, click Create a new provider.

3. Enter a name and click Create.

Create a channel at LINE

1. While on the newly created provider configuration screen, click Create a LINE Login channel.

2. Select the channel's country, and then enter a name and description.

3. For the App types, select Web app.

4. Select the check boxes for the developers agreement and privacy policy documents and click Create.

   Now you'll be able to see the channel ID and channel secret for the app.

5. Click LINE Login and add the Callback URL, which should look like https://<tenant-domain>/broker/authentication/callback.

6. To publish the channel, next to your channel's name, click Developing and then click Publish.

For more information about the enrollment process, refer to register as developer.

Configure LINE Login in the identity broker

1. Click Add identity provider and select OpenID Connect.

2. Typically, you provide the following information:

   • Display name: LINE (for example)
   • Active: Select the check box.
   • Client ID: The channel ID.
   • Authentication method: Client secret post
   • Client secret: The channel secret.
   • Well-known configuration endpoint: https://access.line.me/.well-known/openid-configuration and click Load.
     • This fills the Authorization endpoint, Token endpoint, Issuer, User information endpoint, and JWKs URI.
   • Signature type: Symmetric
   • Shared secret: The channel secret.
   • Encrypted JWT: Do not select the check box.
   • Single logout: Do not select the check box.

Variant

You always need at least one variant. For LINE Login, you only need to configure a variant name, such as Authentication. For scopes, Thales recommends email, profile and openid, but you can add more scopes.