Wallix Trustelem Endpoint SSO (OpenID Connect)

This guide refers to using SSO to authenticate access to your endpoints. You cannot use these instructions to set up SSO for logging into your ngrok account in the dashboard.

This guide explains how to configure Wallix Trustelem as the primary Identity Provider for ngrok endpoints using single sign-on (SSO). By integrating Wallix Trustelem SSO with ngrok, you can:

Restrict access to your ngrok endpoints to only users authenticated via Wallix Trustelem
Use Wallix Trustelem security policies and multi-factor authentication (MFA) authenticators
Use Wallix Trustelem’s Dashboard to facilitate access to ngrok apps

The ngrok integration with Wallix Trustelem supports service provider-initiated (SP-initiated) SSO. In this mode, users access ngrok endpoints and are redirected to Wallix Trustelem for authentication.

What you’ll need

A Wallix Trustelem account with administrative rights to create apps.
An ngrok Pay-as-you-go account with an authtoken or admin access to configure endpoints with OpenID Connect.

1. Configure Wallix Trustelem

Create an OpenID Connect application in Wallix Trustelem by following Trustelem’s OpenID Connect documentation. When you configure the application, use these ngrok-specific values:

RedirectURI: https://idp.ngrok.com/oauth2/callback
Login URL: the URL of your ngrok endpoint (for example, https://trustelem-sso-test.ngrok.app)

After you save the application, copy the ClientID, ClientSecret, and Issuer URL. You use these values when you configure ngrok. Create at least one Wallix Trustelem user and grant it access to the application so that user can sign in through Wallix Trustelem.

2. Configure ngrok

Use the OpenID Connect Traffic Policy action to enforce Wallix Trustelem authentication on your endpoint.

This step assumes you have an app running locally (for example, on localhost:3000) with the ngrok client installed.

Create a policy.yaml file with the following content, replacing the placeholder values with those copied from Wallix Trustelem:

on_http_request:
  - actions:
      - type: openid-connect
        config:
          issuer_url: 'YOUR_TRUSTELEM_ISSUER_URL'
          client_id: 'YOUR_TRUSTELEM_CLIENT_ID'
          client_secret: 'YOUR_TRUSTELEM_CLIENT_SECRET'
          scopes:
            - openid
            - profile
            - email

Start an ngrok endpoint with this policy, replacing YOUR_DOMAIN with your ngrok domain:

ngrok http 3000 --traffic-policy-file policy.yaml --url YOUR_DOMAIN

Copy the URL next to Forwarding (for example, https://trustelem-sso-test.ngrok.app).

3. Test the integration

In your browser, launch an incognito window.
Access your ngrok endpoint (for example, https://trustelem-sso-test.ngrok.app or using the copied endpoint URL).
When prompted, log in with your Wallix Trustelem credentials.
After you log in, you see your web app.

General Guides

CLI Credentials

Dashboard SSO

Databases

Endpoints SSO

Event Destinations

Frameworks

JWT Validation

Kubernetes Ingress

OAuth

Protocols

Webhooks

Web Servers

Wallix Trustelem Endpoint SSO (OpenID Connect)

What you’ll need

1. Configure Wallix Trustelem

2. Configure ngrok

3. Test the integration

​What you’ll need

​1. Configure Wallix Trustelem

​2. Configure ngrok

​3. Test the integration

What you’ll need

1. Configure Wallix Trustelem

2. Configure ngrok

3. Test the integration