My Oracle Support Banner

Is it Possible to Change the Attributes Used for Third-Party JWT Bearer Assertions (Doc ID 2626867.1)

Last updated on JANUARY 07, 2020

Applies to:

Oracle Access Manager - Version 11.1.2.3.0 and later
Information in this document applies to any platform.

Goal

When using OAM JWT Bearer Assertions OAM compares JWT "sub" attribute with "client_id" attribute of OAuth Client. Is it possible to change this comparison such that POST parameter client_id in the REST request is compared to a different JWT attribute?

For example, if the POST request to /ms_oauth/oauth2/endpoints/<SERVICE_NAME>/tokens includes the following POST data:

 

OAM compares the POST-parameter client_id=<CLIENT_ID1> with JWT attribute sub=<CLIENT_ID2> and it will fail because they do not match. Is it possible to choose which JWT attribute (in this example appid) which contains the real client_id?

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.