Is it Possible to Change the Attributes Used for Third-Party JWT Bearer Assertions (Doc ID 2626867.1)

Last updated on SEPTEMBER 22, 2023

Applies to:

Goal

When using OAM JWT Bearer Assertions OAM compares JWT "sub" attribute with "client_id" attribute of OAuth Client. Is it possible to change this comparison such that POST parameter client_id in the REST request is compared to a different JWT attribute?

For example, if the POST request to /ms_oauth/oauth2/endpoints/<SERVICE_NAME>/tokens includes the following POST data:

OAM compares the POST-parameter client_id=<CLIENT_ID1> with JWT attribute sub=<CLIENT_ID2> and it will fail because they do not match. Is it possible to choose which JWT attribute (in this example appid) which contains the real client_id?

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.