Prerequisites for OAuth 2.0 Authentication

Before configuring OAuth 2.0 authentication, obtain the following information from the identity-provider administrator:

• HTTPS token endpoint, if REST clients require a documented token-acquisition URL.
• HTTPS token-introspection endpoint.
• OAuth client ID and client secret for UIM introspection.
• Required token audience value or values, if enforced by the deployment.
• Token claim name that identifies the calling user.
• Token role or group claim that identifies UIM REST API users. The access token used for UIM REST API access must include the existing uim-users group requirement in the configured role or group claim.
• HTTPS certificate chain for the identity-provider endpoint, if the certificate is not already trusted by the UIM JVM.