...
If you have not already done so, register User Administration with your OpenID Connect identity provider. You can get the values for the attributes used in the oidc.json file from the authorization server (Keycloak, connect2id, and so on).
Register the necessary redirect URIs so that the OIDC server knows where to send the user after authentication. The
<CTP_DIR>BASE_URL>/em/login/oauth2/code/ctp
URI should be registered.
...