Overview This document explains how to enable OpenID Connect (OIDC) authentication for Experior and the Experior Remote Viewer. Once configured, users can authenticate via an external Identity Provider (IdP) instead of using local credentials. This setup supports standard OIDC-compatible identity providers (e.g., Azure AD, Keycloak, Auth0, Okta, or similar platforms).   Prerequisites Before starting, ensure the following: Experior is installed and runnable Experior Remote Viewer is available Access to an Identity Provider (IdP) that supports OpenID Connect Ability to register a client/application in the IdP   1. Experior Configuration Runtime Requirements Experior must be started using one of the following modes: -graphicsserver -headless These modes enable the web interface and API required for authentication.   Web API Configuration Update the WebApiSettings.json file to include identity provider settings. Option A – Direct OIDC Configuration Provide explicit configuration values: 1 "IdentityProvider": { 2 "Authority": "https://<idp-domain>/", 3 "Issuer": "https://<idp-domain>/", 4 "Audience": "account", 5 "ClientId": "experior-remote-viewer", 6 "UserIdField": "", 7 "RedirectUri": "http://127.0.0.1:8080/callback", 8 "EndSessionRedirectUri": "http://localhost:8080/", 9 "AuthorizationScope": "openid", 10 "Prompt": "login" 11 }   Option B – Dynamic Configuration via External API Alternatively, configuration can be retrieved from an external service: 1 "ExternalApi": { 2 "BaseUrl": "http://localhost:5050/api", 3 "IdpEndpoint": "/idp" 4 }, 5 "IdentityProvider": { 6 "Authority": "", 7 "Issuer": "", 8 "Audience": "", 9 "ClientId": "", 10 "UserIdField": "", 11 "RedirectUri": "", 12 "EndSessionRedirectUri": "", 13 "AuthorizationScope": "", 14 "Prompt": "login" 15 } In this scenario, Experior will query the external API to retrieve the required IdP configuration. Other Relevant Settings Ensure the following sections are configured as needed: WebUi.Enabled = true CorsConfiguration.AllowAll = true (or restrict appropriately for production) CertificateConfiguration.AllowInsecureCertificate should be false in production   2. Identity Provider Setup Your Identity Provider must be configured with a client application for Experior Remote Viewer. Required Configuration Create a client with the following characteristics: Client ID: experior-remote-viewer (or match your configuration) Protocol: OpenID Connect Redirect URI: Must match RedirectUri in WebApiSettings.json Scopes: At minimum openid Optional but recommended: Enable refresh tokens Configure logout redirect URI Add additional scopes such as profile or email Supported Identity Providers Any OIDC-compliant provider can be used, for example: Azure Active Directory Keycloak Auth0 Okta   3. Remote Viewer Setup The Remote Viewer uses the configured Identity Provider via Experior's API. Ensure: Remote Viewer can reach the Experior Web API Redirect URI configured in the IdP matches the viewer callback endpoint Network configuration allows communication between viewer, Experior, and the IdP   4. Login Flow The authentication flow works as follows: User opens the Remote Viewer User is redirected to the Identity Provider login page User authenticates with the IdP IdP redirects back to the Remote Viewer using the configured callback URL Experior validates the token Access is granted   5. Best Practices Always use HTTPS in production environments Do not allow insecure certificates outside of development Restrict CORS settings to known origins Keep client secrets and configuration secure Align redirect URIs exactly between configuration and IdP   Summary By configuring Experior with an OpenID Connect-compatible Identity Provider, you enable secure, centralized authentication for both Experior and the Remote Viewer. This allows integration with enterprise identity systems and improves security and user management.

This article describes the navigation around the scene inside Remote Viewer on a PC. Two objects are relevant for navigating the scene: Camera: virtual camera that displays the Experior scene streamed to the Remote Viewer. Projection: perspective Field of View Axis: vertical Field of View: 50 degrees Clipping Planes: near 0.3m, far 1000m Physical Camera: false Camera target: movable object which the camera is always pointing at. To visualise the Camera target, go to Settings inside Remote Viewer, and set Show camera target to true.   Rotation To rotate the camera around the camera target, click the left mouse button and drag the mouse.   Translation To pan / move / translate the camera target horisontally, click the right mouse button and drag the mouse. The camera will always move with it. Note: when the camera is too close to the camera target, the translation might appear slow. Maker sure the camera target is visible, and in the correct position. Zoom To move the camera towards/away from the camera target, use the mouse wheel.   Fly camera The camera can be "flown" in a similar way like a First-person view (FPV) drone: To go forward (in the direction of the camera), use the W button / up arrow key. To go left, use: A / left arrow key To go right, use: D / right arrow key To go back, use: S / down arrow key To speed up, use left shift.   Reset camera To reset camera, use the Reset camera button in the scene, or go to Settings, and click Reset camera The camera can be reset into: Default position Position that shows all objects in the scene. To achieve this, go to Settings, and set Reset camera to scene bounds to true