[External Email] Re: disable oauth2-jwt

Cantor, Scott cantor.2 at osu.edu
Thu Sep 19 19:25:19 UTC 2024


The bulk of the docs on client authentication as handled by the expected flow is in https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/2929033287/OAuth2ClientAuthnConfiguration

It assumes you know what you want to do though, in very precise technical fashion, like "I want to hash secrets and stuff them into metadata fles for testing" or "I want to use service accounts and LDAP to authenticate clients, and then use an attribute in LDAP to derive the actual client_id for the OAuth layer".

-- Scott




More information about the users mailing list