Technical references : Authentication methods : Authentication : OpenID Connect (OIDC) : Default configuration per client : Planon App
Planon App
Planon Mobile needs the authorization code with a public client and Proof key for code exchange (PKCE) flow and will use offline tokens.
To use Planon Mobile with OIDC you must configure your cloud environment via the Environment management gadget on the SSO tab and enable OpenID Connect for the Mobile solution.
* 
Default Keycloak configuration is present in your environment. Make sure the Offline session times are always longer than one hour! Shorter session times might result in unexpected behavior.
Setting
Value
Client type
openid-connect
Client ID
planon-mobile-app
Client authentication
Off
Authentication flow
Standard flow
Root URL
Home URL
Valid redirect URIs
Web origins
planon://live-app
Access Token Lifespan
Expires after 15 minutes
Client Token Idle
Inherits from realm setting
Client Token Max
Inherits from realm setting
Client Offline Token Idle
Expires after 30 days
Client Offline Token Max
Expires after 180 days
Proof Key for Code Exchange Code Challenge Method
S256
Authentication, Required action: Welcome the user*
Enabled
* On-premise environments require a Keycloak Plugin.
Technical information - mobile apps