1.2.1.1 Metadata for Terraform Deployment

This topic describes the metadata collected from the previous IAM (ICDS) configuration for terraform deployment.

Following are the metadata required for terraform deployment:

1. Get Domain URL - Go to the Domain where the Confidential application is created. And from Domain details page, get the Domain URL. Example:

   https://idcs-xxxxxx.identity.oraclecloud.com:443

2. Open IAM(IDCS) well-known openid-configurations in the browser.

   <Domain URL>/.well-known/openid-configuration

3. From well-known openid-configurations, copy the issuer, jwks_uri. Example:

   "issuer": "https://identity.oraclecloud.com/",
   "jwks_uri": "https://idcs-xxxxxx.identity.oraclecloud.com:443/admin/v1/SigningCert/jwk",

4. Identity Provider URL and Audience should be the same as Domain URL.

   Identity Provider URL: "https://idcs-xxxxxx.identity.oraclecloud.com"
   Audience: "https://idcs-xxxxxx.identity.oraclecloud.com:443"

5. Copy Client ID and Client Secret from Confidential application which was created earlier.
   • Go to Domains and click on the Integrated applications tab, and then search for the confidential application which was created.
   • From the selected confidential application, navigate to the OAuth Configuration tab.
   • From the General Information section, copy the Client ID.
   • From Client secret section, copy the Secret by clicking Show secret.
6. For workflow server role mappings, see Role Mapping for MicroTx Workflows.
7. Claims Roles path will be defaulted to group_roles, unless user explicitly changes it using the CustomClaims API.

   Coordinator Admin User Roles Path: group_roles
   Workflow Claims Role Paths: group_roles