This guide walks a Carerix admin through generating the OpenID configuration URL and confidential client credentials needed to connect Carerix (GraphQL) via the Kombo connection flow. You'll copy three values into the connection flow: the OpenID Configuration URL, the Client ID, and the Client Secret.
Before you start
- You'll need a Carerix user with access to Maintenance → Identity Access.
- Keep the Kombo connection flow open in a separate tab — you'll paste values into it as you go.
Step 1
In Carerix, go to Maintenance → Identity Access in the left sidebar, then open the CLIENTS tab.
Step 2 — Open the OpenID Configuration
On the CLIENTS tab, click OpenID Configuration.
Step 3 — Copy the OpenID Configuration URL
This opens the OpenID configuration in a new tab (e.g. https://id-s3.carerix.io/auth/realms/kombo/.well-known/openid-configuration). Copy the full URL from the address bar and paste it into the OpenID Configuration URL field in the Kombo connection flow.
Step 4 — Create a new confidential client
Back on the CLIENTS tab, click New and choose Confidential.
Make sure you pick Confidential, not Public. Confidential clients use a secret to authenticate as a standalone service — which is what the integration needs.
Step 5 — Fill in the client form
Complete the New client form:
- Name — a recognizable name for the integration (e.g.
my-integration). - Code — use the suggested format
urn:{vendor}/{unique name}(e.g.urn:company/myintegration). - Default scopes — add the scopes provided by the Kombo connection flow.
- Active — set to Yes.
Then click Save.
Step 6 — Copy the Client ID and Client Secret
After saving, Carerix shows your new Client Secret and Client ID. Copy both and paste them into the matching fields in the Kombo connection flow.
You're done
With the OpenID Configuration URL, Client ID, and Client Secret entered in the connection flow, submit it to finish connecting Carerix (GraphQL).