We need to implement support for authentication using the Domino OIDC Provider as an Identity Broker (IB) for the HCL Nomad Mobile Clients on iOS and Android.
The Current State & Problem Statement
Currently, the Domino OIDC Provider successfully acts as an Identity Broker to any upstream IdP adhering to OIDC standards (e.g., Keycloak). This modern authentication flow is already robustly supported across the following deployment models:
Web Login
Web Federated Login (WFL)
Notes Federated Login (NFL)
Nomad Federated Login (HCL Nomad for web browsers)
However, this capability is conspicuously absent from the HCL Nomad Mobile Clients (iOS and Android).
Proposed Solution
Extend the OIDC authentication capabilities to the Nomad Mobile (Android and iOS) ecosystem. Specifically, HCL Nomad for iOS and Android should seamlessly support login flows utilizing the Domino OIDC Provider as an Identity Broker to route authentication requests to the customer's centralized upstream IdP.
The client should be able to securely acquire and utilize the necessary tokens to establish the NRPC connection and facilitate offline replication, mirroring the federated login success we have already achieved with Nomad for web browsers.
Business Value & Customer Impact
Implementing this enhancement provides immediate, high-impact value to our enterprise user base:
Feature Parity & Platform Consistency: Closing this authentication gap aligns the mobile clients with Notes, Web, and Nomad Web, delivering a cohesive product suite that is easier for IT administrators to deploy, document, and support.
Competitive Advantage: Supporting standard OIDC upstream IdPs for mobile database replication removes a major deployment blocker for security-conscious organizations looking to expand their HCL footprint to mobile workforces.
