Skip to content

CommonOIDCProfileConfiguration

Scott Cantor edited this page Feb 15, 2021 · 4 revisions

Current File(s): conf/oidc-relying-party.xml, conf/relying-party.xml

Format: Native Spring

The following configuration options can be used for OIDC core/SSO and dynamic registration profile configurations:

  • authorizationCodeFlowEnabled (Predicate<ProfileRequestContext>): Whether to enable authorization code flow. Default: true.

  • hybridFlowEnabled (Predicate<ProfileRequestContext>): Whether to enable hybrid flow. Default: true.

  • implicitFlowEnabled (Predicate<ProfileRequestContext>): Whether to enable implicit flow. Default: true.

  • refreshTokensEnabled (Predicate<ProfileRequestContext>): Whether to enable refresh tokens support. Default: true.

  • tokenEndpointAuthMethods (Collection<String>): The comma-separated list of supported _token_endpoint_auth_method_s for this profile. Default: client_secret_basic,client_secret_post,client_secret_jwt,private_key_jwt. Can be configured with idp.oidc.dynreg.tokenEndpointAuthMethods and idp.oidc.tokenEndpointAuthMethods -properties in conf/idp.properties for both dynamic registration and SSO profiles.

(Migrated)