Page History

Pre-requisite:

OIDC authentication requires the OpenBao CLI to start a local callback listener on port 8250. This listener receives the authentication token after you complete the login in your browser. Before running the login command, ensure the following conditions are met:

Local callback listener (port 8250)

The CLI opens a temporary local HTTP server on:

http://localhost:8250

This server must be reachable by the browser you use to complete the login.

Port availability

Port 8250 must be free on the machine where the CLI is running. If another process is already using this port, the OIDC login will fail.

You can verify port availability with: 

ss -tln | grep 8250

Start the login flow

bao login -method=oidc

A browser window will open where you can authenticate using your EWC IAM tenancy credentials. If doesn't open on some Operating System, you can copy the URL provided and paste it in the browser.

Browser reachability

The browser used for authentication must be able to reach the machine running the CLI on localhost:8250. This means:

• If you run the CLI on your local workstation, the browser works normally.

• If you run the CLI on a remote server, the browser on your workstation cannot reach localhost:8250 on that server. In this case, you must copy the login URL and open it manually on a machine that can complete the flow.