Requirements

​

DNS

​

Root DNS

1. Before installation, create the DNS zone my-domain.com if it does not already exist.
2. Provide nuon.my-domain.com as the value for the Root Domain input.
3. Once Nuon BYOC has fully provisioned, the Cloud DNS nameservers for the install will be available in the outputs.
4. Create an NS record named nuon.my-domain.com using the Cloud DNS nameserver values.
5. Once propagation is complete, the Nuon Dashboard should be reachable at app.nuon.my-domain.com.

​

Delegation DNS

​

GitHub App

1. Go to GitHub App Settings and click New GitHub App.
2. Configure the app with these settings:

3. Set permissions:

4. Under “Where can this GitHub App be installed?”, select Only on this account (unless you need to access repos in other GitHub organizations).
5. Click Create GitHub App.
6. After creation, scroll to the bottom and click Generate a private key. Save the PEM file — you’ll provide it as a secret later.
7. Note the App ID and Client ID from the app settings page — share these along with the app name and PEM file with Nuon.

​

Identity Providers

​

Google

1. Go to the Google Cloud Console and create or select a project.
2. Navigate to APIs & Services > Credentials.
3. Click Create Credentials > OAuth client ID and select Web application as the application type.
4. Configure the OAuth client:

5. Save the Client ID and Client Secret — you’ll need them for the install inputs and secrets.

​

Okta

1. In the Okta Admin Console, navigate to Applications and create a new OIDC application.
   1. For Sign-in method: Select OIDC - OpenID Connect
   2. For Application type: Select Web Application
2. Set the Sign In Redirect to https://auth.<your-root-domain>/auth
3. Set Trusted Origins to <your-root-domain>
4. Save the client id and secret.

​

Auth0

module "byoc_auth0" {
  source = "github.com/nuonco/byoc-auth0"
  # Your Auth0 tenant domain
  auth0_domain = "your-tenant.auth0.com"
  # The root domain for your BYOC install
  public_domain = "<your-root-domain>"
  # Your Nuon install ID
  install_id   = "<your-install-id>"
  install_name = "<your-install-name>"
}

1. Go to Actions > Library in your Auth0 dashboard
2. Click Create Action > Build from scratch
3. Name it AddScope and select the latest runtime
4. Replace the code with:

exports.onExecutePostLogin = async (event, api) => {
  const email = event.user.email;
  api.accessToken.setCustomClaim(`email`, email);
};

5. Deploy the action
6. Go to Actions > Triggers > Post Login
7. Drag the AddScope action into the flow and save

​

Slack App (Optional)