Prerequisite Setup

Prior to generating user assertion and access tokens, you must:

  1. Generate a public/private key pair for signing the JWT user assertion.
  2. Add a confidential application in the Integrated Applications page of your IDCS tenant to enable JWT and store the public key and certificate.

The process of adding a confidential application must be performed by a user assigned to an IDCS Administrator role. It is only necessary to enable JWT and upload the public key/certificate. You do not need to add resources in the confidential application.

Note: Instructions for creating the public/private key pair and adding a confidential application are provided in the Generate the key section and Configure the client application section (respectively) of the Oracle Cloud Platform REST Adapter documentation, at Authentication Support, Use OAuth 2.0 Grants in Identity Domain Environments, Prerequisites for JWT User Assertion.

Warning: The client id and client secret of your application must be kept confidential and must not be shared with anyone outside of your organization.


Last Published Friday, November 29, 2024