.png)
OAuth2
Definition
OAuth2 configuration allows to define some global parameters that will apply to all OAuth2/OpenID Connect federations of the tenant.
Configuration
You can access the OAuth2 configuration :
by clicking on "Access" → “OAuth2”
by clicking on "System" → "Configurations" → "Access Service" and perform an import/export.
Properties
Property name | Type | Mandatory | Description | Values (default value in bold) |
|---|---|---|---|---|
tokens |
| Configuration of OAuth2/OIDC tokens | - |
Tokens properties
Property name | Type | Mandatory | Description | Values (default value in bold) |
|---|---|---|---|---|
accessToken |
| NO | Configuration related to access token | - |
refreshToken |
| NO | Configuration related to refresh token | - |
authorizationCode |
| NO | Configuration related to authorization code | - |
idToken |
| NO | Configuration related to id token | - |
assertionSignatureCertificateIds |
| NO | List of certificates identifier used to sign JWT tokens (access token and id token) | - |
accessToken properties
Property name | Type | Mandatory | Description | Values (default value in bold) |
|---|---|---|---|---|
type |
| NO | Defines the access token format. | JWT, OPAQUE |
validity |
| NO | Defines the access token validity period. | 1 hour |
refreshToken properties
Property name | Type | Mandatory | Description | Values (default value in bold) |
|---|---|---|---|---|
validity |
| NO | Defines refresh token validity period. | 7 days |
enabled |
| YES | Allows to enable or disable the delivery of the refresh token with the access token. | true,false |
authorizationCode properties
Property name | Type | Mandatory | Description | Values (default value in bold) |
|---|---|---|---|---|
validity |
| NO | Defines authorization code validity period. | 2 minutes |
idToken properties
Property name | Type | Mandatory | Description | Values (default value in bold) |
|---|---|---|---|---|
validity |
| NO | Defines ID Token validity period. | 1 hour |
assertionSignatureCertificateIds properties
Property name | Type | Mandatory | Description | Values (default value in bold) |
|---|---|---|---|---|
assertionSignatureCertificateId |
| NO except when using JWT access token or id token. | Allows to determine the certificate id used to sign the JWT tokens. | - |
Example
<maiaamcp:OAuth2Configuration>
<tokens>
<accessToken>
<validity>PT55M</validity>
<type>OPAQUE</type>
</accessToken>
<refreshToken enabled="true">
<validity>PT17H</validity>
</refreshToken>
<authorizationCode>
<validity>PT55M</validity>
</authorizationCode>
<idToken>
<validity>PT17H</validity>
</idToken>
<assertionSignatureCertificateIds>memority_saml_idp</assertionSignatureCertificateIds>
</tokens>
</maiaamcp:OAuth2Configuration>